ce197f3378bbdad25f29f1b2fdc8969b8e0975102954ae62d60915eea6668ba4

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Lib/Intlib.vbs
Size 55KB
Sample260801-pkgjnsap4x
SHA256 ce197f3378bbdad25f29f1b2fdc8969b8e0975102954ae62d60915eea6668ba4
MD5 eaac049fa5bd163ac25794818818dbfc
SHA1 ebd0a365050d13d39eed3dec2fd11fb76c1aaa44
SHA512 6a191b497a251c01067d38efb1df76d2d2965626c974415aeaff5bc3ed57e451a6d64cb4ba5319f7096d27c58015a29c343e0c5621c8b5eec7af2cd918c00f7f
SSDEEP 1536:y14rFds50ZEjRSN2HumFumHumwieiie2umqW/smvNpiLAPdZyEZwOyjKEfUkUViF:yarm0ZUW/smvNpiLAPdZyEZwOyWE9UVq
TLSH
T1E9439625180351E79A9032B6CCF54262D1B968E207F27275F84CD87D3F21DA78DFA6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3172	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Lib\Intlib.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:3172

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads