Malicious
VBScript
MD5: da20554cf050dc39fb87fc37f4e838a5
Size: 523.07 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 510.8 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9cbe9bce950d008ab85a673967e922bb94552e50ada6f4eeabc6105b3665a9c1
- MD5
- da20554cf050dc39fb87fc37f4e838a5
- Verdict
- Malicious
- File type
- VBScript · 510.8 KB
Cite this report: https://app.malva.re/sha256/9cbe9bce950d008ab85a673967e922bb94552e50ada6f4eeabc6105b3665a9c1
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
523.07 KB · 523,065 B
First seen
2026-11-02 07:15 · 2 hours ago
Last seen
2026-11-02 07:15 · 2 hours ago
Last analysis
2026-11-02 07:15 · 2 hours ago
Hashes
MD5
da20554cf050dc39fb87fc37f4e838a5
Sha1
97ae6951156dbf1e3c0624a371c08e9f83497373
Sha256
9cbe9bce950d008ab85a673967e922bb94552e50ada6f4eeabc6105b3665a9c1
Sha384
db93939df6cc91d80785c74e8e7388ef3e57a746ff4ecb1bc6aa3f542aabe2860d52fef04af006440085652c573df957
Sha512
adfbe2a8ad9e62ce97c93441e09b5c183e8fed5624e7219a91bf5ab5001be635add32619638ff66d01116fe1d0261829d1f7c646a65501b01f9a07ffaf836b51
SSDeep
12288:sxuStJ+ac472gqlYRNBMvVNbH42Xaumd9AsuVtrr/SDOxbGWSCT3T9uqpxtQwq6k:OqYmjVu
TLSH
36B4EC67CA441D03A43791B2AB46C564F0AEB756490FD082FB4F8F42776C2E7B8C5AC9
Detection
Symbol obfuscation
Very low
1 malicious · 2 files
VBSda20554cf050dc39fb87fc37f4e838a5T1027 · T1059.005
VBSda20554cf050dc39fb87fc37f4e838a5.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes