Malicious
bb27d9fa92117bd497cff6b96abb1216
VBScript
MD5: bb27d9fa92117bd497cff6b96abb1216
Size: 45.8 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c87a856dd8c36eb4eb044105691143b42a097c413ed2116439a9a49d6ca6ca1c
- MD5
- bb27d9fa92117bd497cff6b96abb1216
- Verdict
- Malicious
- File type
- VBScript · 44.7 KB
Cite this report: https://app.malva.re/sha256/c87a856dd8c36eb4eb044105691143b42a097c413ed2116439a9a49d6ca6ca1c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
45.8 KB · 45,797 B
First seen
2026-10-26 08:00 · an hour ago
Last seen
2026-10-26 08:00 · an hour ago
Last analysis
2026-10-26 08:00 · an hour ago
Hashes
MD5
bb27d9fa92117bd497cff6b96abb1216
Sha1
f403316107bfef2ef621e4d6ea39fb616cbccd37
Sha256
c87a856dd8c36eb4eb044105691143b42a097c413ed2116439a9a49d6ca6ca1c
Sha384
078156154250a039959058e8aaf21fb2c195caf204b0fcf74f3460de0b962129cb88a4efa520dc2624af8b4a74bc8270
Sha512
c4b8d33654ebf06e1486eeed4ccf420b8dc4bded3a03c26a585f1c3b9b3d2bd4b95d7c17fc9a3c8b3d4eff7f2368f8a5f7fa8ac632ba1633e2d06425972dbc8a
SSDeep
768:JVUlG6RIILrbNnSNKWNUKiXxaT4gtLV9ghkjNGXmHfh8BYz37MV3K6x4:JVUlraIfpnSNQKp44/ghyGXESu37gK6W
TLSH
F0233AECDA2622160C4626A7F8C88650C5BC835611170160BFD9735D682BF7CA3FDFAB
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBSbb27d9fa92117bd497cff6b96abb1216T1027 · T1059.005
VBSbb27d9fa92117bd497cff6b96abb1216.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSbb27d9fa92117bd497cff6b96abb1216T1027 · T1059.005
VBSbb27d9fa92117bd497cff6b96abb1216.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
bb27d9fa92117bd497cff6b96abb1216
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account