Malicious
VBScript
MD5: b684515c07748ff8cee3e05fe628a842
Size: 709.54 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 692.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 7409271235b370ae6dcf5308264a15fe81450c74c6a42db83b203b1c92226e03
- MD5
- b684515c07748ff8cee3e05fe628a842
- Verdict
- Malicious
- File type
- VBScript · 692.9 KB
Cite this report: https://app.malva.re/sha256/7409271235b370ae6dcf5308264a15fe81450c74c6a42db83b203b1c92226e03
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
709.54 KB · 709,537 B
Hashes
MD5
b684515c07748ff8cee3e05fe628a842
Sha1
798b4ed2fa999aa24e0e9e9317cb43c7b4610320
Sha256
7409271235b370ae6dcf5308264a15fe81450c74c6a42db83b203b1c92226e03
Sha384
e4384f756af70ffcc3b6e18c84cd43c27dcb0da08795f1f8b4c7c6466bcc8d88fee9d353d73f699342f41971d4ac8d1a
Sha512
f122b5a9622d036540dcec98c7ebd41026b7eb557189904c86a73eec3f76c5566d31fc147386f5a275d447021de78bfc596da88bc6a6822d84ce61f6480c029c
SSDeep
12288:OTudVdDrNxMgHl9ZqYw0gR0NbPdT+N7tDrcgjql9cnxaxDyZokU3sBwY:gudldl2Y20NJT+NBciqlan4xDyZbU8yY
TLSH
9DE412844F186696C7D6FBA94E12AB1F474816C2EB19B9F57CCF01153B7A20AFEC16C0
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBSb684515c07748ff8cee3e05fe628a842T1027 · T1059 · T1059.005
VBSb684515c07748ff8cee3e05fe628a842.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential