Malicious
Malicious

c3e99b59dc0df29995c77128b5cd9058

Share on LinkedIn
Print
VBScript
MD5: c3e99b59dc0df29995c77128b5cd9058
Size: 46.55 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 45.5 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
6606e6443604d09f9f4fb7ab8a0d168b9c25041cdec61be55286da034cf12ce0
MD5
c3e99b59dc0df29995c77128b5cd9058
Verdict
Malicious
File type
VBScript · 45.5 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/6606e6443604d09f9f4fb7ab8a0d168b9c25041cdec61be55286da034cf12ce0

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
46.55 KB · 46,547 B
First seen
2026-10-26 08:00 · 46 minutes ago
Last seen
2026-10-26 08:00 · 46 minutes ago
Last analysis
2026-10-26 08:00 · 46 minutes ago
Hashes
MD5 c3e99b59dc0df29995c77128b5cd9058 Sha1 a89bae8d0bb0e42af06f86f44c12f5c3795ea1f7 Sha256 6606e6443604d09f9f4fb7ab8a0d168b9c25041cdec61be55286da034cf12ce0 Sha384 731d0727c4639365b3a10341719b8899c14e225ce40f18df089b8edb9c2f8f8c7526b417edfee6c537bdb6576786ec65 Sha512 4ec60e3ef32de32f5bc79f67141e6adcebb0ba621660b8e2f4b87aa0e87003446364466386508b6717ae757355922fc8d7030f5caf500822268f8774406025dd SSDeep 768:JVUFG8Rx52rb9nedceqexnnMN4cLdLVbwlCBhF8w2z37RYD:JVUFhT58JneR6N4Cd5wlCmj378 TLSH 71233BA4FA9A11650C0A2AFADC492191C5BC455146330470FEF7638CE43EA5CF7BEE6E
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBSc3e99b59dc0df29995c77128b5cd9058
VBSc3e99b59dc0df29995c77128b5cd9058.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙