be1148ffd813e27523ae9212840fd61c1ad992dedeafc2ae03e088b4f030a006

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SimpleMapClient/MapParameters.vbs
Size 2KB
Sample260724-php32ayvhz
SHA256 be1148ffd813e27523ae9212840fd61c1ad992dedeafc2ae03e088b4f030a006
MD5 fa1a9d5a6299a2db454452bae8955aa2
SHA1 55b15ba7ec6dddb9ead45163866b3e13139d2de2
SHA512 0c9fd459fc9d942f2407577260894c1af24c0cf91bd315dc39421827934a4f72bfca648cb14276aa96198e28e2c21f28d22b75dbfc57d8b961877c441f5988a3
TLSH
T1D8516C0C3645E9215873ABB1CB12A041FD67193B595A9854BEFE12291F31018EAB0FBE
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1708	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SimpleMapClient\MapParameters.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:1708

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads