Malicious
Malicious

b994d052ea4b82119e454185a7032b55

Share on LinkedIn
Print
VBScript
MD5: b994d052ea4b82119e454185a7032b55
Size: 33.78 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 33 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f14553167e6075134f9295dfbe3391b053fba3f10c2b383141aef3eecbcf7cdd
MD5
b994d052ea4b82119e454185a7032b55
Verdict
Malicious
File type
VBScript · 33 KB
MITRE ATT&CK
T1027T1059T1059.005

Cite this report: https://app.malva.re/sha256/f14553167e6075134f9295dfbe3391b053fba3f10c2b383141aef3eecbcf7cdd

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
33.78 KB · 33,776 B
First seen
2026-10-28 11:00 · 12 minutes ago
Last seen
2026-10-28 11:00 · 12 minutes ago
Last analysis
2026-10-28 11:01 · 12 minutes ago
Hashes
MD5 b994d052ea4b82119e454185a7032b55 Sha1 c9425f6225afdce38967cdf9b49e803ee652393e Sha256 f14553167e6075134f9295dfbe3391b053fba3f10c2b383141aef3eecbcf7cdd Sha384 543d4bd07dbcf29110b3bbde3326f3f39bf18274f0e130195778ca961eed6f09c6345e5148cb7d22b60d4f8989159419 Sha512 25e1765d7d8e0909cc3b1aa966861b2ef30e1ef0c04c99347505fc08bab5ef01564fa7d37d66cce8ade66080467f6f7c54bde58c9f86532329ffb6f2bfbd35d8 SSDeep 768:KwQYGshpS7oTWMyr/fDoqHdcK5dYCLe3aJjQt+R+mAwUQIoHLkRq:fQYGshpS7o6Myr/fDoqHdcK5dvLe3KtZ TLSH A4E230168B0E4BF11D79657EF51BA912A92003A2B9386D0979BFD38C3F76910CBC14B7
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBSb994d052ea4b82119e454185a7032b55
VBSb994d052ea4b82119e454185a7032b55.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙