Malicious
Malicious

bd5e0b150a4b0a413170999f9e8ebe6c

VBScript
MD5: bd5e0b150a4b0a413170999f9e8ebe6c
Size: 45.73 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 44.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
52da93f8b34752c1b12677bf333f680db5a160ee90250fb260ce43da612303b4
MD5
bd5e0b150a4b0a413170999f9e8ebe6c
Verdict
Malicious
File type
VBScript · 44.7 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/52da93f8b34752c1b12677bf333f680db5a160ee90250fb260ce43da612303b4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
45.73 KB · 45,732 B
First seen
2026-10-26 08:00 · an hour ago
Last seen
2026-10-26 08:00 · an hour ago
Last analysis
2026-10-26 08:00 · an hour ago
Hashes
MD5 bd5e0b150a4b0a413170999f9e8ebe6c Sha1 fcfa4217d7bb918da134db1772dec20b6a39af28 Sha256 52da93f8b34752c1b12677bf333f680db5a160ee90250fb260ce43da612303b4 Sha384 aa63a5fc2046b53eabfc5805c25bb9538130bc2017c68c584b07d07ce8dde1073615e54112cb752555c0e5df46802ce6 Sha512 b37c5ef4f631a6d1a644726f5ac6ff2f23e7a3245259a4209307ad06c47df0de06be3829123b0135eee6faac01601cf5829b512567eb86f98d690f27143aebc3 SSDeep 768:JVUSGnR+M3QLrbMnyeVSNxIe74gtLVchrDg2CJ8dzz37dHQZR9:JVUSyXAfYnyetG44ehrDcSV37ZQj9 TLSH 93233AA4EF2006494D0733ADDC46D360C778911A0D2B08A0BEDEF79D644B65CABBD67B
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBSbd5e0b150a4b0a413170999f9e8ebe6c
VBSbd5e0b150a4b0a413170999f9e8ebe6c.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBSbd5e0b150a4b0a413170999f9e8ebe6c
VBSbd5e0b150a4b0a413170999f9e8ebe6c.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
bd5e0b150a4b0a413170999f9e8ebe6c
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙