Malicious
Malicious

f0c9b2ac062c0841ae9133ceb77643ec

VBScript
MD5: f0c9b2ac062c0841ae9133ceb77643ec
Size: 46.67 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 45.6 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b95f099633585826303115afbf47199c247b03d840becd1d841aed3dea613c15
MD5
f0c9b2ac062c0841ae9133ceb77643ec
Verdict
Malicious
File type
VBScript · 45.6 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/b95f099633585826303115afbf47199c247b03d840becd1d841aed3dea613c15

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
46.67 KB · 46,666 B
First seen
2026-10-28 14:00 · 7 hours ago
Last seen
2026-10-28 14:00 · 7 hours ago
Last analysis
2026-10-28 14:00 · 7 hours ago
Hashes
MD5 f0c9b2ac062c0841ae9133ceb77643ec Sha1 af22f34a595050142cc6cfac396259022478e319 Sha256 b95f099633585826303115afbf47199c247b03d840becd1d841aed3dea613c15 Sha384 bccb57e11e95ead35ec0d91f0d236b808e1831a2f147d48a85cfeb87718692833af2a7ab89eaccfc320f800287646d06 Sha512 9742aec6337b42b1f0ce30a1d63a94e82a03d4ac52b14bc33872a407707bb8e482c88f9ccf54635332ab3427e0a59ee7d60f35a509686dc90cb72a0a1fdd88d8 SSDeep 384:EoyvrA7VKkj0krIegDzf8GPqSLUDZfD8486/V4d81H+sJwZftXMI+kbAICQQfIyZ:EfdAKGz TLSH CD23E0BE4CA895FB46BED727EDD7851AF372982B303D2C0448C31B84495A547B8CCA9D
Detection
Symbol obfuscation
High

2 malicious · 2 files
VBSf0c9b2ac062c0841ae9133ceb77643ec
VBSf0c9b2ac062c0841ae9133ceb77643ec.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBSf0c9b2ac062c0841ae9133ceb77643ec
VBSf0c9b2ac062c0841ae9133ceb77643ec.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
f0c9b2ac062c0841ae9133ceb77643ec
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙