221a7e98c4db2ab6438a1f50953e13a912dba47a6a9993bb16802efa7ffca426

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/07/2026, 10:05

Target
Statement of Account.vbs
Size 11KB
Sample260717-l4rbfagy2k
SHA256 221a7e98c4db2ab6438a1f50953e13a912dba47a6a9993bb16802efa7ffca426
MD5 91606af8ae80d91d854d690124d149bf
SHA1 84960409429631677e2b8e8673e64af0c6448157
SHA512 70d7f922b1db6531555053096cc3a4cf54725e1ec48f833bdf39d62d8530666c9f7dca6105330d33899012f27fc802e44d69ca7ef675f9b89edc42c2763f185b
SSDEEP 192:+KelIeduurHMAkZQ1whzF4Wh7isq1w0177idu+RuCN:+K7AkZxhzviQu+44
TLSH
T1C1423D645B8B0979F48CCE95685B140EB2F2A9E97A1105182B7B1FE7FC23CCDD438527
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
1	5032	WScript.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	1	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Statement of Account.vbs"
1⤵
- Badlisted process makes network request
PID:5032

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact