1185e9b694d2f379c99d9d7ad06570709e78335dadd844a6ac8950973b1110a9

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 12:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tmma893376.vbe
Size 53KB
Sample260804-p29a1sbb84
SHA256 1185e9b694d2f379c99d9d7ad06570709e78335dadd844a6ac8950973b1110a9
MD5 30cfd86f10573c6aa9f60592b65efea5
SHA1 a39b2ee2bf211deedad2d29f3b247506594c292a
SHA512 9dfe370974268b7a7bfd897fe91eba7d3d0f745405d163084e2f5d9afded83a40d2dcf16d18fcc680635c7275fa69c4465789b9e7cf9a6262fc758c6b020744c
SSDEEP 768:POMDI4Q5Nwzud7XpkyyUWESb49YS8/uQXArjefZQ/DFMUO0HH0Q:mMMPDjlVyDl25V0Q
TLSH
T11D33A978190558D78113BC01D9831A96CFF8D21326EB1EB9C341A6CA079E7D7C8B6DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
5	1112	WScript.exe

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1112	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\tmma893376.vbe"
1⤵
- Badlisted process makes network request
- Executes a VBScript file via the Windows Script Host.
PID:1112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads