Malicious
Malicious

b684515c07748ff8cee3e05fe628a842

VBScript
MD5: b684515c07748ff8cee3e05fe628a842
Size: 709.54 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 692.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
7409271235b370ae6dcf5308264a15fe81450c74c6a42db83b203b1c92226e03
MD5
b684515c07748ff8cee3e05fe628a842
Verdict
Malicious
File type
VBScript · 692.9 KB
MITRE ATT&CK
T1027T1059T1059.005

Cite this report: https://app.malva.re/sha256/7409271235b370ae6dcf5308264a15fe81450c74c6a42db83b203b1c92226e03

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
709.54 KB · 709,537 B
First seen
2026-10-26 07:46 · an hour ago
Last seen
2026-10-26 07:46 · an hour ago
Last analysis
2026-10-26 07:46 · an hour ago
Hashes
MD5 b684515c07748ff8cee3e05fe628a842 Sha1 798b4ed2fa999aa24e0e9e9317cb43c7b4610320 Sha256 7409271235b370ae6dcf5308264a15fe81450c74c6a42db83b203b1c92226e03 Sha384 e4384f756af70ffcc3b6e18c84cd43c27dcb0da08795f1f8b4c7c6466bcc8d88fee9d353d73f699342f41971d4ac8d1a Sha512 f122b5a9622d036540dcec98c7ebd41026b7eb557189904c86a73eec3f76c5566d31fc147386f5a275d447021de78bfc596da88bc6a6822d84ce61f6480c029c SSDeep 12288:OTudVdDrNxMgHl9ZqYw0gR0NbPdT+N7tDrcgjql9cnxaxDyZokU3sBwY:gudldl2Y20NJT+NBciqlan4xDyZbU8yY TLSH 9DE412844F186696C7D6FBA94E12AB1F474816C2EB19B9F57CCF01153B7A20AFEC16C0
Detection
Symbol obfuscation
Low

2 malicious · 2 files
VBSb684515c07748ff8cee3e05fe628a842
VBSb684515c07748ff8cee3e05fe628a842.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059~T1059.005
Shape scr:vbs
malicious 1 nodes

Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBSb684515c07748ff8cee3e05fe628a842
VBSb684515c07748ff8cee3e05fe628a842.deobfuscated.vbs
No malware configuration was found at this point.

Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
b684515c07748ff8cee3e05fe628a842
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
b684515c07748ff8cee3e05fe628a842
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙