f6072fc668e9fec6220e82de8731b690e6bc176700b0ccc8d4b8e08ddc1359f7

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/07/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
reference.vbs
Size 48KB
Sample260717-3fkbnacz21
SHA256 f6072fc668e9fec6220e82de8731b690e6bc176700b0ccc8d4b8e08ddc1359f7
MD5 a335b04ae4ad4b88b2bec4684823625f
SHA1 e5cf8d90127b884980f9ec0ee8781a46929c8983
SHA512 4732bcfeca6faa8810b71168889d6392a5c532611a178bde05b797d519242911d4bd969397f1a7f3e383003b977e7e3e8ed80936beef7a0af076e52ecad835c5
SSDEEP 768:0C9WZV5SjIFZnSk3sx7iNggutl670mTqE5bICFY05sr4fxpK39:fW/5JFxSk34OYP6YmWIkCFYGvps9
TLSH
T18523D768209681B8F7DCF51EA3FD0C0EA4285E03F50174661AA5FF9B7B9B706F252C52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1104	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\reference.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:1104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads