Malicious
fb06900484b7ce33e3bab0338e96ed2b
VBScript
MD5: fb06900484b7ce33e3bab0338e96ed2b
Size: 954.49 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 932.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 01f2606bd3683b8cfef9adf930eff2e0d9c9b84258a6d1fbcca8635aac91cde5
- MD5
- fb06900484b7ce33e3bab0338e96ed2b
- Verdict
- Malicious
- File type
- VBScript · 932.1 KB
Cite this report: https://app.malva.re/sha256/01f2606bd3683b8cfef9adf930eff2e0d9c9b84258a6d1fbcca8635aac91cde5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
954.49 KB · 954,489 B
First seen
2026-10-30 07:31 · 2 days ago
Last seen
2026-10-30 07:31 · 2 days ago
Last analysis
2026-10-30 07:31 · 2 days ago
Hashes
MD5
fb06900484b7ce33e3bab0338e96ed2b
Sha1
f4082ac77836cc600f12690d22c69d1b71ab8ff9
Sha256
01f2606bd3683b8cfef9adf930eff2e0d9c9b84258a6d1fbcca8635aac91cde5
Sha384
3f4a74c414fd50e423d79f04e68097ae15cc1915103a3d07c9101ea5427c9311b27f57ed494b702acddc26321cb416bc
Sha512
15ab132061f5e042c062454a377c8e9659690a592d56f339b5a52aadcb230d5ebb7145ab699531b5535e16a8c491bda7fcfc1f994af989e865040e01cc1610c6
SSDeep
24576:IuMXQ+4KzszBPQcJbW7K2C90MggLXmMXTWNIWC:CXQDQ2N2GN90MgqXdWNXC
TLSH
C11523808E0C7DC3C6C316459665D8AFDE9A17F2EB1E83527DEB005F16BAB532D898C0
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBSfb06900484b7ce33e3bab0338e96ed2bT1027 · T1059.005
VBSfb06900484b7ce33e3bab0338e96ed2b.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 2 files
VBSfb06900484b7ce33e3bab0338e96ed2bT1027 · T1059.005
VBSfb06900484b7ce33e3bab0338e96ed2b.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
fb06900484b7ce33e3bab0338e96ed2b
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account