Malicious
Malicious

b8a47ed457ad80b6025ac2e452c59aa3

VBScript
MD5: b8a47ed457ad80b6025ac2e452c59aa3
Size: 142.51 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 139.2 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f63c39604bf2ac215a7ed59ae93601e8d2677485cbc6a7110e13731ee73ca232
MD5
b8a47ed457ad80b6025ac2e452c59aa3
Verdict
Malicious
File type
VBScript · 139.2 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/f63c39604bf2ac215a7ed59ae93601e8d2677485cbc6a7110e13731ee73ca232

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
142.51 KB · 142,506 B
First seen
2026-10-28 11:00 · 19 minutes ago
Last seen
2026-10-28 11:00 · 19 minutes ago
Last analysis
2026-10-28 11:01 · 18 minutes ago
Hashes
MD5 b8a47ed457ad80b6025ac2e452c59aa3 Sha1 b4af8dc7f108753faec89396450838e503acbe2e Sha256 f63c39604bf2ac215a7ed59ae93601e8d2677485cbc6a7110e13731ee73ca232 Sha384 412e9251b9c1bc9043fe2eccf7d2eafc58310b16bcf60823be295684c60e5f95c58bf970f1a1635d09df55c6876e7b32 Sha512 541ca0c90d49efc7732eeb73ec076e8ea9ab5e1d22a392734c8d77567bf962818c454b2add3eeb32fbd6398b64bb61a5904da670defdc9edff60414c72aab6c9 SSDeep 1536:6/roB7HF1hUYFMJbpIMwHU5vxDcPtFoNCu1XG/2A/YU/SkkOXRkoYfJy6yihKrYd:6/raPurzZwHExDq723+SsXRHYfbyEKVw TLSH F1D3DA18ACC43D3D697F2B795F0C2F305AB4C1360A2969AC5CEC331DA809D9A9779DB4
Detection
Symbol obfuscation
Low

2 malicious · 2 files
VBSb8a47ed457ad80b6025ac2e452c59aa3
VBSb8a47ed457ad80b6025ac2e452c59aa3.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBSb8a47ed457ad80b6025ac2e452c59aa3
VBSb8a47ed457ad80b6025ac2e452c59aa3.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
b8a47ed457ad80b6025ac2e452c59aa3
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙