Sign up free
Malicious
Malicious

f3f746abbc9dd71326cc045501cdb13a

Share on LinkedIn
Print
VBScript
MD5: f3f746abbc9dd71326cc045501cdb13a
Size: 721.37 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 704.5 KB VBScript. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
d55a1b7493c995dbbcb14e4336ee11e3791c3f865df6e578212dee16509f5fef
MD5
f3f746abbc9dd71326cc045501cdb13a
Verdict
No known threat found
File type
VBScript · 704.5 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/d55a1b7493c995dbbcb14e4336ee11e3791c3f865df6e578212dee16509f5fef

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
721.37 KB · 721,373 B
First seen
2026-11-03 07:00 · 10 hours ago
Last seen
2026-11-03 07:00 · 10 hours ago
Last analysis
2026-11-03 07:00 · 10 hours ago
Hashes
MD5 f3f746abbc9dd71326cc045501cdb13a Sha1 1076e9dc20e985c461e8d66c62fa0ce868944097 Sha256 d55a1b7493c995dbbcb14e4336ee11e3791c3f865df6e578212dee16509f5fef Sha384 9512518d93892be1984f6c6c9c3de5920276131225b5692206ddb82da046141b84f26a8b974fb357002ce16f509c5fe4 Sha512 49b9133d18e1b3966f45368fc668a4823c8da068a2a8e6881a38b6351c20f09b266c3c2186664c8af1e3da657f707af2c0f78e0d7deb1a8ef26da5f206c49dc8 SSDeep 12288:gmJqyj4bWqlNK7zJ6znB89SlHXbdx5JtPLSUw+RwR4ajbHEO11BCVB7VhdngxPrT:fa8MlHXJx5JtDSbbukbHEOgVBBHnyMKB TLSH 36E422E316C5E83595E605ACE897A70245E312BF3D8875D13E8CE3AC29F31053B9B8D9
Detection
Symbol obfuscation
Low

3 malicious · 3 files
VBSf3f746abbc9dd71326cc045501cdb13a
VBSf3f746abbc9dd71326cc045501cdb13a.deobfuscated.vbs
BIN.executed
VBS.subscript.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙