5722d0fc7cda2fc03b8c8716162c37a78e761b0004ddef3381935d6cc22ae872

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Havoc-main/client/CMakeLists.vbs
Size 6KB
Sample260727-pkafcssala
SHA256 5722d0fc7cda2fc03b8c8716162c37a78e761b0004ddef3381935d6cc22ae872
MD5 8111993fc59d6e2ae014888b3fa6c452
SHA1 d1293ba13a3e1a5d9bff177e718fde550e011321
SHA512 7dbef670fd37b5c94756ab7489d858b62d78f772404e2344fd63d849acfdc951ccef2692d1e2916e5366f65fa065482bea00eccde628cc19bdc03316546c6ed5
SSDEEP 96:ZsP46f0hk4jcP5hANF8KSIMR6M5LXWd745RwgpGeSu/yoBYeClm41zP/Vrf:aRf0hjbIE7cGefyoGeClm49P/Vb
TLSH
T1C8D13143453D60131EAE8AEB39465B2014D636A7B74104CE3A7CD98A8F4DDED7A533BC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2552	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Havoc-main\client\CMakeLists.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads