Malicious
Malicious

c73667735ce0f637b764c8d9f691f41f

Share on LinkedIn
Print
VBScript
MD5: c73667735ce0f637b764c8d9f691f41f
Size: 32.91 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 32.1 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f24db3436d2ac8be97a79320c86778003b28ecc72b94dde7d8a42f815f469061
MD5
c73667735ce0f637b764c8d9f691f41f
Verdict
Malicious
File type
VBScript · 32.1 KB
MITRE ATT&CK
T1027T1059T1059.005

Cite this report: https://app.malva.re/sha256/f24db3436d2ac8be97a79320c86778003b28ecc72b94dde7d8a42f815f469061

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
32.91 KB · 32,905 B
First seen
2026-10-30 19:30 · 2 days ago
Last seen
2026-10-30 19:30 · 2 days ago
Last analysis
2026-10-30 19:30 · 2 days ago
Hashes
MD5 c73667735ce0f637b764c8d9f691f41f Sha1 ebabd3cc0baf8997527a0446a9353678cc23336a Sha256 f24db3436d2ac8be97a79320c86778003b28ecc72b94dde7d8a42f815f469061 Sha384 1ff9e194df132fa23eba64a3ed2faa13ee57eee1eeac6d6d8e4287cc1be6dac8a26893aced0d9b6171932f63f733b2f7 Sha512 ab3994ca743683fc7ea6d2e6c7ef3837d3742a893aa4ed5723c2132c74a434fd069f24cef80d41329e60c0fa9319f25acd85fd9b9a8896f7213e8b55b704c862 SSDeep 384:KHa7LNUoE/Ux0HwSdn8v9CYw0xil7aODU/VhafeZPLL5XBScSx224rXG/WOB3WVR:KumpHruxwRJkWn+Fyy5LM+ TLSH 75E262369831CBF0D93A35A3658F7417DA10C36EA839A90F398F91493B35634CBD64A7
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBSc73667735ce0f637b764c8d9f691f41f
VBSc73667735ce0f637b764c8d9f691f41f.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙