Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/08/2026, 23:23
Static task
static1
Behavioral task
behavioral1
Sample
File32.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
File32.vbs
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target File32.vbs
- Size 1KB
- Sample260818-3dendssfjb
- SHA256 f9ab34ff18501e0403f2b7d816d0a7b802c10052a56551c92ce70ff208257e46
- MD5 7f1f722b16671b5845886cb4983790bd
- SHA1 b154a7c69289e62bda39d51259500be9c4d39f18
- SHA512 5fb280302029e39645e5f9ba21fad92a64d4cda2206c54ac6060220869d2b91e97e2c1f1fbc3dff977cfc02bec2843cdb3a4074cb4112175b60de456abc6c8e6
- TLSH T16141248B3A4302715476EAD42E19A05EDCFD152304664CDCB99CC4425F3D35BE6E95FC
- MD5 SHA1 SHA512 TLSH
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 32 IoCs
description ioc Process File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Links\desktop.ini WScript.exe File opened for modification C:\Users\Admin\OneDrive\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessibility\Desktop.ini WScript.exe File opened for modification C:\Users\Public\desktop.ini WScript.exe File opened for modification C:\Users\Public\AccountPictures\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Videos\desktop.ini WScript.exe File opened for modification C:\Users\Public\Documents\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Desktop\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Searches\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini WScript.exe File opened for modification C:\Users\Public\Desktop\desktop.ini WScript.exe File opened for modification C:\Users\Public\Downloads\desktop.ini WScript.exe File opened for modification C:\Users\Public\Libraries\desktop.ini WScript.exe File opened for modification C:\Users\Public\Music\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Favorites\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Pictures\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Documents\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Downloads\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Saved Games\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Contacts\desktop.ini WScript.exe File opened for modification C:\Users\Admin\Music\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini WScript.exe File opened for modification C:\Users\Public\Pictures\desktop.ini WScript.exe File opened for modification C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini WScript.exe File opened for modification C:\Users\Public\Videos\desktop.ini WScript.exe - Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
pid Process 1772 WScript.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Contacts\desktop.ini
- Size 99B
- SHA256 03c5136ec6cf66439353f6ca5fb5ba926c7ee8780d938b87dc8ae417b3458115
- MD5 0388bbb1eaa1e919ffa6268dcd554005
- SHA1 5102f74f84b1b4b3e2d9b594fe284efb3fc41d93
- SHA512 e7d9a3eb4e912307d59a89fb6f2f6eb858f85ea282a7f4c087966a3363fa12945a290ae491962f9bc2b5c97cba131e4fcf993d027cb2c0245a0b815d814fd16f
- TLSH T10EB012DF00848924035077E5A3A24227E9475C8E473A34C2250189943F13024E161EFD
- MD5 SHA1 SHA512 TLSH