970e4803252c21edbd67a77618f7e6d0f914be9bd765f99ca78c703fdf24404a

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
README.wsf
Size 13KB
Sample260729-ppmlgsgl2t
SHA256 970e4803252c21edbd67a77618f7e6d0f914be9bd765f99ca78c703fdf24404a
MD5 09618c70185b5b354e18c66e15c67671
SHA1 3a7384773f63e82a5484920e085c6f758e061d71
SHA512 58ae38ee27d9b5a2a36f29981ad98b14cbc53c6dfa7e324e5102992ead5a8a073fa8dbcc010bdf7cfdd61b15fd13ba5b36c9c95af232747eca26917147909ab5
SSDEEP 384:WD/CYiAo1N0ILQn+Xh973UQ6XgtaIS5R1Xcu:WDa916ILzXbjUQ6XNlXx
TLSH
T12F52C9765D8562720A53C2E37B8F7D67E719B11492C12D1ABC9C8818B34B3DED24F28B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2880	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\README.wsf"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads