Malicious
VBScript
MD5: bd5e0b150a4b0a413170999f9e8ebe6c
Size: 45.73 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 52da93f8b34752c1b12677bf333f680db5a160ee90250fb260ce43da612303b4
- MD5
- bd5e0b150a4b0a413170999f9e8ebe6c
- Verdict
- Malicious
- File type
- VBScript · 44.7 KB
Cite this report: https://app.malva.re/sha256/52da93f8b34752c1b12677bf333f680db5a160ee90250fb260ce43da612303b4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
45.73 KB · 45,732 B
First seen
2026-10-26 08:00 · 49 minutes ago
Last seen
2026-10-26 08:00 · 49 minutes ago
Last analysis
2026-10-26 08:00 · 49 minutes ago
Hashes
MD5
bd5e0b150a4b0a413170999f9e8ebe6c
Sha1
fcfa4217d7bb918da134db1772dec20b6a39af28
Sha256
52da93f8b34752c1b12677bf333f680db5a160ee90250fb260ce43da612303b4
Sha384
aa63a5fc2046b53eabfc5805c25bb9538130bc2017c68c584b07d07ce8dde1073615e54112cb752555c0e5df46802ce6
Sha512
b37c5ef4f631a6d1a644726f5ac6ff2f23e7a3245259a4209307ad06c47df0de06be3829123b0135eee6faac01601cf5829b512567eb86f98d690f27143aebc3
SSDeep
768:JVUSGnR+M3QLrbMnyeVSNxIe74gtLVchrDg2CJ8dzz37dHQZR9:JVUSyXAfYnyetG44ehrDcSV37ZQj9
TLSH
93233AA4EF2006494D0733ADDC46D360C778911A0D2B08A0BEDEF79D644B65CABBD67B
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBSbd5e0b150a4b0a413170999f9e8ebe6cT1027 · T1059.005
VBSbd5e0b150a4b0a413170999f9e8ebe6c.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential