c98759df4ced3dc19de1265f96c2384a2637984c09c170c1be7858a5740bf614

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Drunken Dream Driver Cheat Engine/vmdisk.vbs
Size 466KB
Sample260804-pgldfswves
SHA256 c98759df4ced3dc19de1265f96c2384a2637984c09c170c1be7858a5740bf614
MD5 c50b9376df81869850f0ea23dd994a16
SHA1 2aedb88803e3f9f895e8174e16f31d9df022778c
SHA512 980fd6e89b37738d4674311fe9983370255e3432b32127a7db794f0b58fc3cc0000d75adf334ff618c5323014e2cff7d0853a5da0a5b7c032a92ae356125c226
SSDEEP 12288:UaxEQZz4HduTmK78J/eT9kwx/faKcE25jQ/ayPImEoL:XO03TF78JS9kwx/faKcE25jQ/ayPImEo
TLSH
T1B9A4F937E7A39168D117E2781B8BC6D1E5B078B80734A8CF73E609766B226904F2D3D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4400	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Drunken Dream Driver Cheat Engine\vmdisk.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads