1c64a6016d5ce4982429d057f10fe3d30471684f66fe1b57a7abde40beef6021

Analysis

max time kernel
30s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Languages/Chinese-Traditional.vbs
Size 84KB
Sample260813-2wtplahk21
SHA256 1c64a6016d5ce4982429d057f10fe3d30471684f66fe1b57a7abde40beef6021
MD5 066c263c0989264102166f95ff5b0169
SHA1 2fcae789df5330037afe33d23a5d9b74229ede78
SHA512 5c26c1dc82f33a6f58931204d28170bcda9d18d38c6b1feb26722c88bc8c1b00f81acb5755199f2dd35488ea7c61babbab8a96353ba14aa2b78de20c70aa49fe
SSDEEP 1536:+1Aq6QzjErTdZFNYV87tx6KZ7LXbSb+XsBWnwucNWMIvo:cV6QHEXdZFN4sGYLm1AlcVj
TLSH
T16E835A19578A2BBE079300997B8D2597F7B5507C8ABF22F1243D80B83BA1E2D72734D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3520	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Languages\Chinese-Traditional.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:3520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads