f6fde328e7385026024f028b15b2b50128cbffbdbc6b140f02da764af39ca396

Analysis

max time kernel
149s
max time network
213s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 00:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
The Binding of Isaac Repentance [PPSA03311](axekin.com)/resources/shaders/water.vbs
Size 2KB
Sample260801-afqjfstdla
SHA256 f6fde328e7385026024f028b15b2b50128cbffbdbc6b140f02da764af39ca396
MD5 17ad870179e21f2b85c1245659c71917
SHA1 198275c2ad04d1066a298619027f89648537f270
SHA512 64f134597cedfaeb2175ff4eb9fff6aca77d66d407556ec3b7c8a639d0169b43441f2a8f8296564006422c55ad2290be9ceeb286cfd0a917df441fe9fdd7c877
TLSH
T1FA411E4FB1DD016625C6F0EA8E358122536410811E423347FD1EBE3D35ABA24CB271E7
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3740	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\The Binding of Isaac Repentance [PPSA03311](axekin.com)\resources\shaders\water.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:3740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads