This sample is a 23 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 4 embedded or derived files. It matches 14 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 1c87253992573ffc849c3a3510fcbdd0dc912db9ad1aa94751ed772a18fcf0e2
- MD5
- b5bbe33a6bdb84ddc056b40204c837ad
- Verdict
- Inconclusive
- File type
- VBScript · 23 MB
Cite this report: https://app.malva.re/sha256/1c87253992573ffc849c3a3510fcbdd0dc912db9ad1aa94751ed772a18fcf0e2
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
pe:exe>html
pe:exe>html
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_682cd29d.bin (217600 bytes) |
| Info | PDB Path: t |