4570619162ec807f0f5ca46810666a6b445ba3913b35607544a28cce57331fed

Analysis

max time kernel
30s
max time network
29s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
20/08/2026, 02:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lol_wrapper.vbs
Size 1KB
Sample260820-dff7kaydph
SHA256 4570619162ec807f0f5ca46810666a6b445ba3913b35607544a28cce57331fed
MD5 2dfa9177b54591a6da29ce46dcff580c
SHA1 270d4a4fbbae9ac2c0047a6916b793d9e0f21b56
SHA512 41056f7e19d95adaafe1d5e32fec17603f078a8e493469e4b322d227365b6000cb01b4f76b7e5c2be7462161478b47b641209751f380102a2f3f4c4cc3aea4a1
TLSH
T1F74153BDD7412985E0CAD33460F6C085674EC540A6CAE39F9305AC1E4C5D24B9AEE30E
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2316	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\lol_wrapper.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2316

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads