Malicious
eb66ac474b9edb13383405c76fddb2b7
VBScript
MD5: eb66ac474b9edb13383405c76fddb2b7
Size: 18.12 KB
text/vbscript
This sample is a 17.7 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 409f9caf9c58114525e526ca7cf6ca7a1852407c8427a8b54822fe3760c64843
- MD5
- eb66ac474b9edb13383405c76fddb2b7
- Verdict
- Malicious
- File type
- VBScript · 17.7 KB
Cite this report: https://app.malva.re/sha256/409f9caf9c58114525e526ca7cf6ca7a1852407c8427a8b54822fe3760c64843
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
18.12 KB · 18,124 B
First seen
2026-09-23 08:45 · one month ago
Last seen
2026-09-23 08:45 · one month ago
Last analysis
2026-09-23 08:45 · one month ago
Hashes
MD5
eb66ac474b9edb13383405c76fddb2b7
Sha1
a018dd041c37269d4c512d5000be53c00f19e85e
Sha256
409f9caf9c58114525e526ca7cf6ca7a1852407c8427a8b54822fe3760c64843
Sha384
297a40dc6154a663e4ade6c7c14ba7b04c732daf97ceecd82500501470288fd06c2a82812507881d34f7c8dfc3638391
Sha512
58a4a6b8a9bf94eff9ccba4ef76c63b7a02bacfe8b53d16fddf53b1a87f4388f5383208c57d747089685279324607fc8f7826d51a79c1d42988b0d8126bca701
SSDeep
384:3SMMm18wHVNW+68tpxZPkTG/giFKfOiPK95flc8NEKK6L:3SMMmnHW+fTMTGXUfOiPK3fFNPKC
TLSH
EC8209938EE24440BB673DD78CE9C2FA54340A72D0360D347EB5B23E5D09BC4E96E59A
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBSeb66ac474b9edb13383405c76fddb2b7T1027 · T1059.005
VBSeb66ac474b9edb13383405c76fddb2b7.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSeb66ac474b9edb13383405c76fddb2b7T1027 · T1059.005
VBSeb66ac474b9edb13383405c76fddb2b7.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
eb66ac474b9edb13383405c76fddb2b7
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account