Malicious
de5724c73899f2878dba5fff4be5ebcc
VBScript
MD5: de5724c73899f2878dba5fff4be5ebcc
Size: 189.35 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 184.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 95b575ae84fa75a3151cb503087931f030d87dab7015279036febefac1fe6c7b
- MD5
- de5724c73899f2878dba5fff4be5ebcc
- Verdict
- Malicious
- File type
- VBScript · 184.9 KB
Cite this report: https://app.malva.re/sha256/95b575ae84fa75a3151cb503087931f030d87dab7015279036febefac1fe6c7b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
189.35 KB · 189,347 B
First seen
2026-11-04 11:00 · 2 hours ago
Last seen
2026-11-04 11:00 · 2 hours ago
Last analysis
2026-11-04 11:01 · 2 hours ago
Hashes
MD5
de5724c73899f2878dba5fff4be5ebcc
Sha1
e12b423cf263324def109edfb79ef994e867e0d3
Sha256
95b575ae84fa75a3151cb503087931f030d87dab7015279036febefac1fe6c7b
Sha384
ba05abf4700d6ce9e259867dcfbdc0ba26afe895bad450e19d4281d15e16d0ae8926b318e6b44984639c159fab19597a
Sha512
cce2958ba3145f1c50d4e72f14f4ae07c63142e390eb402be1903231cd9ef548cd0723dfeaac7080bf27d15847c1deffa7d29b1bd760366c662c59d1b24de915
SSDeep
3072:w/CcrnChPFEVlHHfIhFs9rK4H3b2YoGBG+mcGsL2jwo0kLASvt/QzYH+3j2g8FML:wzrnoPunkFs9rK4H3b2YoGBlDZLzojU7
TLSH
FB0401A3A5842765FA7FA6F354B0E6079FB106763575A2E02E1E31940BEF90367C05C3
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBSde5724c73899f2878dba5fff4be5ebccT1027 · T1059.005
VBSde5724c73899f2878dba5fff4be5ebcc.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
VBSde5724c73899f2878dba5fff4be5ebccT1027 · T1059.005
VBSde5724c73899f2878dba5fff4be5ebcc.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
de5724c73899f2878dba5fff4be5ebcc
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account