Malicious
VBScript
MD5: c49e66d841ae3dae674857be61512bfc
Size: 46.16 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 45.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 16e39444401512223339d2705664595c0a69ccecf575ea6284f841d1075584c1
- MD5
- c49e66d841ae3dae674857be61512bfc
- Verdict
- Malicious
- File type
- VBScript · 45.1 KB
Cite this report: https://app.malva.re/sha256/16e39444401512223339d2705664595c0a69ccecf575ea6284f841d1075584c1
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
46.16 KB · 46,160 B
First seen
2026-10-28 06:15 · 47 minutes ago
Last seen
2026-10-28 06:15 · 47 minutes ago
Last analysis
2026-10-28 06:15 · 47 minutes ago
Hashes
MD5
c49e66d841ae3dae674857be61512bfc
Sha1
5956e4167d36c360d56eb77504537508d5e8c4e1
Sha256
16e39444401512223339d2705664595c0a69ccecf575ea6284f841d1075584c1
Sha384
1c1cfb1f163783ac7fdbf029420ccea1672d6995dd3a02dd04c02f78a99797a11a49b36aa1e90ddb4c0efaafdd4a8a98
Sha512
3ed4e3bc5d5abd4898a9ae176098d0972990e07bdaf5e2fe88097e448870b57e241e8c9e81ec970c547150f20e5a2fdcd44bf214549830d6896073447d226acc
SSDeep
384:UMsQZCeRdg1SsUFZFFxw4ocheN9QK2Ac+j3riX0S/1LU/4BKnC8kn47Taim/XmGL:GG/
TLSH
2E23BF3D1C94023F52B0DA9BE1A3862BFD83B7673121DC09A4EF0789664B95374E761E
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBSc49e66d841ae3dae674857be61512bfcT1027 · T1059.005
VBSc49e66d841ae3dae674857be61512bfc.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential