858fc71f47e43fa006fdfde42f10960011f8ba24d5a6f1f9b0b276a2e9742543

Analysis

max time kernel
149s
max time network
127s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 09:22

Target
image_0013.vbe
Size 52KB
Sample260604-lb35jacy4m
SHA256 858fc71f47e43fa006fdfde42f10960011f8ba24d5a6f1f9b0b276a2e9742543
MD5 717b835b4aa512ea4656eed52cd4f6d4
SHA1 01827b0d08c1fd2e22f9f4e9fc2f9e2ff99b0e2c
SHA512 10021353556781dbab69cbb981e7313ff364bdac778cfb210e50448397d42fab447bd83c759f914984eee8772e6a7ee973d6c897a6e30a2165cd7e1435494d4a
SSDEEP 768:axzielz8+o2bKASECoFDxSEuQ4R50K+24QRDzmUjp:g+07hScSEe0K+2fRDzPjp
TLSH
T18D33B674290C45EF20D3EA74B08467E3FE5C0A5D9FED6A4F915487DA163EA8734C3A81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\image_0013.vbe"
1⤵
- Badlisted process makes network request
PID:1572