Suspicious
Suspect

d6d41b1be10b42583465694f24efa431

Share on LinkedIn
Print
VBScript
MD5: d6d41b1be10b42583465694f24efa431
Size: 11.35 MB
text/vbscript

This sample is a 10.8 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 14 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f9ff28b32522bf4ac0e8f9fa1b392ce43bd26d0b6b70d4c521a2ad67f4a8cbed
MD5
d6d41b1be10b42583465694f24efa431
Verdict
Inconclusive
File type
VBScript · 10.8 MB

Cite this report: https://app.malva.re/sha256/f9ff28b32522bf4ac0e8f9fa1b392ce43bd26d0b6b70d4c521a2ad67f4a8cbed

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
11.35 MB · 11,352,880 B
First seen
2026-10-19 16:15 · 11 days ago
Last seen
2026-10-19 16:15 · 11 days ago
Last analysis
2026-10-19 16:18 · 11 days ago
Hashes
MD5 d6d41b1be10b42583465694f24efa431 Sha1 93cd326accc4fb9787444f588032e859027edc5b Sha256 f9ff28b32522bf4ac0e8f9fa1b392ce43bd26d0b6b70d4c521a2ad67f4a8cbed Sha384 c9267bfaf297c6de5a84f2495ac82230720966e75c69f95b2c21ce9463ab75a71a3769d3c6674c40c8c5f32c998137ce Sha512 5545f436ebc94de1ecc283d2c41e539807804e5d1757f235f3cdc44d84bfd301f50b23d62e067a2fb97f9be54580c7f705ec3cd8973a7798adbd27571e896f14 SSDeep 98304:AHxytrL7qYXTZtk3t3bvoDTAXbO8EPF4wuy9Di2HJXbDQ6yxKibkkMsEk8cQ:AHxuC9DoD9yy9DhpQ6yxKi0 TLSH D3B6AE92F391969AD52EC039D351F037C662BC898725B0EF6A847F112D72BD0273E729
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team

15 files
VBSd6d41b1be10b42583465694f24efa431
Structure
P7B[Authenticode]_77fed539.p7b
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name Value
Info
Authenticode present at 0xACFE00 size 15664 bytes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙