Malicious
VBScript
MD5: f9bbfc38681a355d464cad3b8ec85569
Size: 7.62 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 7.3 MB VBScript identified by Malva.RE as Stealer Crypter (stealer loader). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1027.001, T1055 and T1140. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 876b1dbc4bcfc548d1fbf8ac8d4fe7dfa15df80e5085372397dffb814c5e5352
- MD5
- f9bbfc38681a355d464cad3b8ec85569
- Verdict
- Malicious
- File type
- VBScript · 7.3 MB
- Family
- Stealer Crypter
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/876b1dbc4bcfc548d1fbf8ac8d4fe7dfa15df80e5085372397dffb814c5e5352
Related Stealer Crypter samples
- b1022d3e58a0318b52feb8aa8048376113ca7596830cb0da750c08f2c8ece583 2026-11-02
- 0086d2f0a06016855a3e583d436fe63e361c605b0a8780bd6e67a80564700e85 2026-10-31
- 5a39bd95d430a1093b3d179d100389ee2cf60226518b82e02572f3e25df2f803 2026-10-30
- 0008c95fb43bd97dec04c408b61a66a38f59a7912e4d4a058647ef14407463f2 2026-10-30
- 9b228bf578fee16d5ccd880ecafcc7159d3678ef09d7fa5c807d423f97d48a9e 2026-10-30
- 2c496e41d45ee787edef9c8dec4fe59e68a0d99746c899a6aabc6cbb36419bd6 2026-10-30
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
7.62 MB · 7,620,608 B
First seen
2026-10-30 16:00 · 2 days ago
Last seen
2026-10-30 16:00 · 2 days ago
Last analysis
2026-10-30 16:00 · 2 days ago
Hashes
MD5
f9bbfc38681a355d464cad3b8ec85569
Sha1
caa8c05bad29af3400593b8297ecada3f0a71e73
Sha256
876b1dbc4bcfc548d1fbf8ac8d4fe7dfa15df80e5085372397dffb814c5e5352
Sha384
df49f406461aa705336ca78ea38f58803082435f5019869a083e0437c2079031c045e9a5998286412cd373d0d023b76a
Sha512
e0f1efca2d504a8e73888e548cf195b458065b12d2e2cc13e4c121d32409cacd839b3af5ac95fceb47ff84994f5295b65d0b072d12ffdec00f58c449edb9e529
SSDeep
49152:FdXnI1LojJQFE2PDDHAIVonNEQwVCL0Q8EU4AGbkWDrWeajH8o/80fv7Awz92Yv7:FFC7MIFQRs9JjcL037L92j+lyE
TLSH
E3764A47EC6549E8C0EEC13085A7A113BF717C896B6127D70B90F6242F36BE0ADB9758
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
VBSf9bbfc38681a355d464cad3b8ec85569T1027 · T1055 · T1140Stealer Crypter
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1027.001~T1055~T1140
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| Attribution | |