Malicious
VBScript
MD5: ba0f92a586477847351ccc65a27bce96
Size: 133.59 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 130.5 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 35f467a96172bda9604b6864d4037f6d2056e6da5e5116da22ae397bd38d98d2
- MD5
- ba0f92a586477847351ccc65a27bce96
- Verdict
- Malicious
- File type
- VBScript · 130.5 KB
Cite this report: https://app.malva.re/sha256/35f467a96172bda9604b6864d4037f6d2056e6da5e5116da22ae397bd38d98d2
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
133.59 KB · 133,587 B
First seen
2026-10-28 11:00 · 10 minutes ago
Last seen
2026-10-28 11:00 · 10 minutes ago
Last analysis
2026-10-28 11:01 · 9 minutes ago
Hashes
MD5
ba0f92a586477847351ccc65a27bce96
Sha1
f1225d0798baa291276afb2f82241fbfb5a16ea5
Sha256
35f467a96172bda9604b6864d4037f6d2056e6da5e5116da22ae397bd38d98d2
Sha384
99e7bd53fa6faa2bb4dcf7b0a68c5b8dfc92f62e25e95636aa6b9cc48167567f053a386fc6bb52ae31dbb9b8f35a0d34
Sha512
67fd3a4688c6a012c32aaaef778c4e17c62f001ce6c054274b2ed311507cf3d137dcf5513ebe91aef161f07e7f949c9504924869de29c038baf2ff40ee8c4516
SSDeep
3072:3yXtMW7XFXqa8qJ0cSrCS1X5UeGepT5KISG:iXtLwa8qyNDTUSyG
TLSH
6ED3E812DDE621378AC60E9DAF0D27D3A4B98514012260FFA5F81FBFF012958DE7AD64
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBSba0f92a586477847351ccc65a27bce96T1027 · T1059.005
VBSba0f92a586477847351ccc65a27bce96.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential