cdfbf5d3955da09942c1993d8e9049ea47709765cae5ddf134e8bf0856a28435

Analysis

max time kernel
118s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 03:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
upx-5.0.1-win64/upx-doc.vbs
Size 36KB
Sample260805-ee99pada35
SHA256 cdfbf5d3955da09942c1993d8e9049ea47709765cae5ddf134e8bf0856a28435
MD5 2b20cf0d043c8b5c0fc0f27aecef750d
SHA1 12f10bf0605dfc46233846f3801b86e15dc109a0
SHA512 3bf5914ffd9b8cfdb46b1ea58d0deedc6518ede533038fc54f48e04481bbf8ae0aade1970699a5384aba5cd11855c621529707a5e702ee04728c37037b41c055
SSDEEP 768:PmW5wh5hr32FGhyidWclu84ZyrtkwKK6kwKKOM6dftXEY3y3X78Swxw+9:Pl5wh5hr+3igclu84Y5Z65ZOtVXEY3Uk
TLSH
T16FF2C66A9B4813F615824A716FDDDBCA5726D22B32326550B8DD820C1F05D385AFBBF0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3060	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\upx-5.0.1-win64\upx-doc.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:3060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads