Malicious
ba1940d14705b912cc92012e782e62f9
VBScript
MD5: ba1940d14705b912cc92012e782e62f9
Size: 27.14 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
27.14 KB · 27,136 B
First seen
2026-09-08 20:30 · one month ago
Last seen
2026-09-08 20:30 · one month ago
Last analysis
2026-09-08 20:30 · one month ago
Hashes
MD5
ba1940d14705b912cc92012e782e62f9
Sha1
8c28a9049b1b21894f70259764001d251ca7bebb
Sha256
c910cad76e5b688af7b887840912b7a49dbf39cc545d4052740f984e06a05e52
Sha384
47053d3ba39476ff2fcc4518f4680d8b53472ce934ad23cfbfefd5891ca4f0f5ac77ca01d90f5ff4491c69364a10b3c8
Sha512
2babc54999a9bb1b8634527d78438361a98ed7620199d242a3a3431a18fb47a3e28608f5ee836e8ab48709780d4b40c4b5deae370b008cf6eef6d4a023a1056e
SSDeep
768:TnWmJqq/emiWSJcJFRJBVD0XnoLwbgIDUj3oTZ:qmoGemifeFjD03LDnl
TLSH
9EC27C65CE2713554E8B1AEADC441C71C4FC4056221300B8BEBDB21D9D05B9CBFBEAAB
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBSba1940d14705b912cc92012e782e62f9T1027 · T1059.005
VBSba1940d14705b912cc92012e782e62f9.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSba1940d14705b912cc92012e782e62f9T1027 · T1059.005
VBSba1940d14705b912cc92012e782e62f9.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
ba1940d14705b912cc92012e782e62f9
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account