Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

This sample is a 4.1 MB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
039851fe0310d0e281fe0068ebe546dfaef34838bd506fd341bd4e71a8cf1530
MD5
e4f00e849e5a0e7575f22e66b5618070
Verdict
Malicious
File type
VBScript · 4.1 MB
MITRE ATT&CK
T1027T1059T1059.005

Cite this report: https://app.malva.re/sha256/039851fe0310d0e281fe0068ebe546dfaef34838bd506fd341bd4e71a8cf1530

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
4.25 MB · 4,253,431 B
First seen
2026-10-29 06:45 · 3 hours ago
Last seen
2026-10-29 06:45 · 3 hours ago
Last analysis
2026-10-29 08:00 · an hour ago
Hashes
MD5 e4f00e849e5a0e7575f22e66b5618070 Sha1 16390f84fda5234668abe1ec6e39f6431daef7e7 Sha256 039851fe0310d0e281fe0068ebe546dfaef34838bd506fd341bd4e71a8cf1530 Sha384 fe20f609bc96b7aebfd91a85b820451bfa78be772afd77f37c56a9a2e78fe346d3aca850ffa242778368dedbb42bfbec Sha512 7ef1dd72983395300030589fc281af766cf651c8ab596968d8da9698d53d08ec031c19616ecbd78ed8b347494a2e203b67fd0d472d40edfb81f9217fa8069f5e SSDeep 49152:92wSyj10i9yEM0tbU1szZ57vw/b1SHNe2rov0l2skHEfaJU:HB TLSH E61602379BA8051B09E1476AF00A6273BF76D423874C82A5CCDDE31939CB4DA927F5E4
Detection
Symbol obfuscation
High

2 malicious · 2 files
VBSe4f00e849e5a0e7575f22e66b5618070
VBSe4f00e849e5a0e7575f22e66b5618070.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBSe4f00e849e5a0e7575f22e66b5618070
VBSe4f00e849e5a0e7575f22e66b5618070.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
e4f00e849e5a0e7575f22e66b5618070
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙