e24804a0b6944793590e3fc0daea99f92b33fb525bfa3acc2bf6948df7c28849

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
nssm-2.24-101-g897c7ad/src/env.vbs
Size 7KB
Sample260724-g14p5stdnb
SHA256 e24804a0b6944793590e3fc0daea99f92b33fb525bfa3acc2bf6948df7c28849
MD5 6265e20a24c71868c040449eead352c3
SHA1 aababf0e344c53fa0f3cd74b795161cc2b11faa1
SHA512 943b15c58894d20ebb0bfd0bc2cc7fb680da8bcdeaa3ec6dbc826c1ae40d6428f4ec988495d3a994ac277bb82867b6c9932c7b37fc33681d681d87fa47e54f43
SSDEEP 96:jbN8zgZslcjuM8dAWtmQT/twOK12Wj6KcoP5d2fSdWajWoYdmU3huFLtpxB:/ikHuVV/KX1cE2qdW4WoY4U3hKLtpr
TLSH
T1D3E11445152AA1A32F74B2389A0CAC7ED77193331FB921E0B4DD48006FC9A7D16F8E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2840	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\nssm-2.24-101-g897c7ad\src\env.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads