Analysis
- user interaction
yes - max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
05/08/2026, 10:58
General
- Target 24122024/Defender_Settings.vbs
- Size 313B
- Sample260805-m2vrhsab27
- SHA256 af42a17d428c8e9d6f4a6d3393ec268f4d12bbfd01a897d87275482a45c847e9
Score
5/10
Malware Config
Signatures
- Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
- Modifies registry class 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\24122024\Defender_Settings.vbs"1⤵
- Executes a VBScript file via the Windows Script Host.
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx