f6d1e7d8c8e595148e60f1f50778c6d7dfa6adaa804472f5615fa082fa625368

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 18:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cracker/voicemod.vbs
Size 1KB
Sample260722-wp5kmaad76
SHA256 f6d1e7d8c8e595148e60f1f50778c6d7dfa6adaa804472f5615fa082fa625368
MD5 92f028d2e9a7a95792c99caaba0eb735
SHA1 f3dce33eb3b83b1f40392b2143cef95e7ef98783
SHA512 805fe0614511886da83f8e785a2823e620f6b80229aa1223fafc3da852ea9b52e2b212f2fd727868da364d2bf9b6fdb1a5eb68294fad9710b53d8715dac6ddc0
TLSH
T15231978A2D28ECC0338F6A79AD5C125552D0CA2F6FB390E1C04BD4B16F229A8B5043B3
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3000	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Cracker\voicemod.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:3000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads