Malicious
Malicious

ba05ca58b33bac6a1b1974e7ebacc935

VBScript
MD5: ba05ca58b33bac6a1b1974e7ebacc935
Size: 85.05 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 83.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
febe6b21ecf3527b1e9f10b4a5d3df40757f85ace131e3464847a4abcf7a881f
MD5
ba05ca58b33bac6a1b1974e7ebacc935
Verdict
Malicious
File type
VBScript · 83.1 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/febe6b21ecf3527b1e9f10b4a5d3df40757f85ace131e3464847a4abcf7a881f

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
85.05 KB · 85,047 B
First seen
2026-10-30 07:45 · 2 hours ago
Last seen
2026-10-30 07:45 · 2 hours ago
Last analysis
2026-10-30 07:45 · 2 hours ago
Hashes
MD5 ba05ca58b33bac6a1b1974e7ebacc935 Sha1 e2023ba8789e64b206ae30b09e0b47af0a5bb709 Sha256 febe6b21ecf3527b1e9f10b4a5d3df40757f85ace131e3464847a4abcf7a881f Sha384 60f075fb5ae4670cc3283309eeb83c24715120bc648445b41a30f334919e5e93fdb4a34df36f019e1c6148c0eb41626c Sha512 14039429ac7786716a1cb0506235197c3cb4674206914b9fd856853078563fe26d851bdb7d13a08a7988016ca6e4deb33483a27c1bc489d9065b8631c756f7e4 SSDeep 1536:STILuMQe1FO75X5ffHqWld3ue6yPCDkP7j8QYKuMJU8Y:STkUeix5XqWzue6tDkP3DYK28Y TLSH C18307E0991331D48F8A2696B84BEB7187EF01051D12306BEDDC6E49B083B5CD769DE7
Detection
Symbol obfuscation
Low

2 malicious · 2 files
VBSba05ca58b33bac6a1b1974e7ebacc935
VBSba05ca58b33bac6a1b1974e7ebacc935.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBSba05ca58b33bac6a1b1974e7ebacc935
VBSba05ca58b33bac6a1b1974e7ebacc935.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
ba05ca58b33bac6a1b1974e7ebacc935
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙