de0200651bbbefb3a525bb471bba195179d4a13f74f9a082b66cd6b35e1098cf

Resubmissions

21/04/2026, 11:21

21/04/2026, 11:18

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
21/04/2026, 11:18

Target
wr.vbs
Size 322B
Sample260421-nec4madv2l
SHA256 de0200651bbbefb3a525bb471bba195179d4a13f74f9a082b66cd6b35e1098cf
MD5 0a55991103cf852bf17f90309e9e32c2
SHA1 4fd659ccc8f1a4169a1de0b7d2792612fcf6362d
SHA512 9f6e3535faa0d683c0cd2f6971d26b3cafee9a1cbbc644a4bbf47fb256ec5008ec81f8f3326e00c0a516cce21d3d36dbf78c2e90fb23d3fbac8a1b46b6ee7140
TLSH
T1A3E07D18962386B72306C1ED5525DD14D2C682F161C69F1E5B00D85B5441735A5CD2DE
MD5 SHA1 SHA512 TLSH

Score

8^/10

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
1	4668	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\wr.vbs"
1⤵
- Badlisted process makes network request
PID:4668

memory/4668-1-0x0000022A80410000-0x0000022A8041C000-memory.dmp

Download