Malicious
Malicious

fb06900484b7ce33e3bab0338e96ed2b

Share on LinkedIn
Print
VBScript
MD5: fb06900484b7ce33e3bab0338e96ed2b
Size: 954.49 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 932.1 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
01f2606bd3683b8cfef9adf930eff2e0d9c9b84258a6d1fbcca8635aac91cde5
MD5
fb06900484b7ce33e3bab0338e96ed2b
Verdict
Malicious
File type
VBScript · 932.1 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/01f2606bd3683b8cfef9adf930eff2e0d9c9b84258a6d1fbcca8635aac91cde5

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
954.49 KB · 954,489 B
First seen
2026-10-30 07:31 · 2 days ago
Last seen
2026-10-30 07:31 · 2 days ago
Last analysis
2026-10-30 07:31 · 2 days ago
Hashes
MD5 fb06900484b7ce33e3bab0338e96ed2b Sha1 f4082ac77836cc600f12690d22c69d1b71ab8ff9 Sha256 01f2606bd3683b8cfef9adf930eff2e0d9c9b84258a6d1fbcca8635aac91cde5 Sha384 3f4a74c414fd50e423d79f04e68097ae15cc1915103a3d07c9101ea5427c9311b27f57ed494b702acddc26321cb416bc Sha512 15ab132061f5e042c062454a377c8e9659690a592d56f339b5a52aadcb230d5ebb7145ab699531b5535e16a8c491bda7fcfc1f994af989e865040e01cc1610c6 SSDeep 24576:IuMXQ+4KzszBPQcJbW7K2C90MggLXmMXTWNIWC:CXQDQ2N2GN90MgqXdWNXC TLSH C11523808E0C7DC3C6C316459665D8AFDE9A17F2EB1E83527DEB005F16BAB532D898C0
Detection
Symbol obfuscation
Low

1 malicious · 2 files
VBSfb06900484b7ce33e3bab0338e96ed2b
VBSfb06900484b7ce33e3bab0338e96ed2b.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
technique1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙