Malicious
f2bc8685486acdbe3237b4c6ab7b7ca1
VBScript
MD5: f2bc8685486acdbe3237b4c6ab7b7ca1
Size: 45.16 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c4f4dbc944a3b2a2e15682123cd10f27ca01d9cbf6016bdaedfc0eafb03a1965
- MD5
- f2bc8685486acdbe3237b4c6ab7b7ca1
- Verdict
- Malicious
- File type
- VBScript · 44.1 KB
Cite this report: https://app.malva.re/sha256/c4f4dbc944a3b2a2e15682123cd10f27ca01d9cbf6016bdaedfc0eafb03a1965
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
45.16 KB · 45,160 B
First seen
2026-10-26 08:00 · an hour ago
Last seen
2026-10-26 08:00 · an hour ago
Last analysis
2026-10-26 08:00 · an hour ago
Hashes
MD5
f2bc8685486acdbe3237b4c6ab7b7ca1
Sha1
11f6d6c99591c3bfa4ffddc055ba0d52822f8b54
Sha256
c4f4dbc944a3b2a2e15682123cd10f27ca01d9cbf6016bdaedfc0eafb03a1965
Sha384
230e7fde4c22097272c26b3c9e860a0fd6f5634befdff698c12c707e482734ad67eec58e378e74169696e7deffb7f716
Sha512
54c833d001ac0e6a10ad6fc9c982613a71baa6a4d0c5271c9842128044221319b576915f6afe5382f58075428231da95d32edac6e222a2499251082927070eb6
SSDeep
768:JVUmGCRAHmrbntnOs3E4DLDVKLxHT4gtLVZDU9Ae4VFf8mSz37zzHc74qf4:JVUm9aHMbtnOs3FDVG44/DUG1V6t37Pv
TLSH
3C136D74FE64322D9E8723A6DC485161CB38601945279460BFE9F34C640BAECF3BE91E
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBSf2bc8685486acdbe3237b4c6ab7b7ca1T1027 · T1059.005
VBSf2bc8685486acdbe3237b4c6ab7b7ca1.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSf2bc8685486acdbe3237b4c6ab7b7ca1T1027 · T1059.005
VBSf2bc8685486acdbe3237b4c6ab7b7ca1.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
f2bc8685486acdbe3237b4c6ab7b7ca1
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account