Malicious
Malicious

c49e66d841ae3dae674857be61512bfc

VBScript
MD5: c49e66d841ae3dae674857be61512bfc
Size: 46.16 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 45.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
16e39444401512223339d2705664595c0a69ccecf575ea6284f841d1075584c1
MD5
c49e66d841ae3dae674857be61512bfc
Verdict
Malicious
File type
VBScript · 45.1 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/16e39444401512223339d2705664595c0a69ccecf575ea6284f841d1075584c1

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
46.16 KB · 46,160 B
First seen
2026-10-28 06:15 · 54 minutes ago
Last seen
2026-10-28 06:15 · 54 minutes ago
Last analysis
2026-10-28 06:15 · 54 minutes ago
Hashes
MD5 c49e66d841ae3dae674857be61512bfc Sha1 5956e4167d36c360d56eb77504537508d5e8c4e1 Sha256 16e39444401512223339d2705664595c0a69ccecf575ea6284f841d1075584c1 Sha384 1c1cfb1f163783ac7fdbf029420ccea1672d6995dd3a02dd04c02f78a99797a11a49b36aa1e90ddb4c0efaafdd4a8a98 Sha512 3ed4e3bc5d5abd4898a9ae176098d0972990e07bdaf5e2fe88097e448870b57e241e8c9e81ec970c547150f20e5a2fdcd44bf214549830d6896073447d226acc SSDeep 384:UMsQZCeRdg1SsUFZFFxw4ocheN9QK2Ac+j3riX0S/1LU/4BKnC8kn47Taim/XmGL:GG/ TLSH 2E23BF3D1C94023F52B0DA9BE1A3862BFD83B7673121DC09A4EF0789664B95374E761E
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBSc49e66d841ae3dae674857be61512bfc
VBSc49e66d841ae3dae674857be61512bfc.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBSc49e66d841ae3dae674857be61512bfc
VBSc49e66d841ae3dae674857be61512bfc.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
c49e66d841ae3dae674857be61512bfc
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙