Suspect
d6d41b1be10b42583465694f24efa431
VBScript
MD5: d6d41b1be10b42583465694f24efa431
Size: 11.35 MB
text/vbscript
This sample is a 10.8 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 14 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- f9ff28b32522bf4ac0e8f9fa1b392ce43bd26d0b6b70d4c521a2ad67f4a8cbed
- MD5
- d6d41b1be10b42583465694f24efa431
- Verdict
- Inconclusive
- File type
- VBScript · 10.8 MB
Cite this report: https://app.malva.re/sha256/f9ff28b32522bf4ac0e8f9fa1b392ce43bd26d0b6b70d4c521a2ad67f4a8cbed
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
11.35 MB · 11,352,880 B
First seen
2026-10-19 16:15 · 11 days ago
Last seen
2026-10-19 16:15 · 11 days ago
Last analysis
2026-10-19 16:18 · 11 days ago
Hashes
MD5
d6d41b1be10b42583465694f24efa431
Sha1
93cd326accc4fb9787444f588032e859027edc5b
Sha256
f9ff28b32522bf4ac0e8f9fa1b392ce43bd26d0b6b70d4c521a2ad67f4a8cbed
Sha384
c9267bfaf297c6de5a84f2495ac82230720966e75c69f95b2c21ce9463ab75a71a3769d3c6674c40c8c5f32c998137ce
Sha512
5545f436ebc94de1ecc283d2c41e539807804e5d1757f235f3cdc44d84bfd301f50b23d62e067a2fb97f9be54580c7f705ec3cd8973a7798adbd27571e896f14
SSDeep
98304:AHxytrL7qYXTZtk3t3bvoDTAXbO8EPF4wuy9Di2HJXbDQ6yxKibkkMsEk8cQ:AHxuC9DoD9yy9DhpQ6yxKi0
TLSH
D3B6AE92F391969AD52EC039D351F037C662BC898725B0EF6A847F112D72BD0273E729
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team
15 files
VBSd6d41b1be10b42583465694f24efa431
Structure
P7B[Authenticode]_77fed539.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
IMGID:1033
IMGID:1033-preview.png
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Info | Authenticode present at 0xACFE00 size 15664 bytes |
15 files
VBSd6d41b1be10b42583465694f24efa431
Structure
P7B[Authenticode]_77fed539.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account