59ecc03526ed187a50e1688bf26d561ef230af597a1aec55a2fe38fe96c91193

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 07:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
rrcc9008352.vbe
Size 65KB
Sample260820-js5ctasdnh
SHA256 59ecc03526ed187a50e1688bf26d561ef230af597a1aec55a2fe38fe96c91193
MD5 af05c3890371d6d8aefab3bb85d7bfaf
SHA1 98f6d75739619ed9c9cc3961275e69fb935b266a
SHA512 93a5033078a1184b94cf8598e042332fa3b81be5a3138eb63b68c0af069573af7a8b69fea5834992da1cd6cfe0377178a604c2509848fe1118db0129bd9ad69f
SSDEEP 384:Fvle2STytT0bHPbIU5gxLJZ9DMEFspqiySGk7Md8uOxI5iKdz+kZrV+Jbie8qZ5/:F9edOTKTSx9TMEO338CJG9eCG
TLSH
T1E4631EF20D8CB2AB426EAC697B8301E4E1AC750C47FD6151FB4C5DC1291F163EAED5A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
7	3236	WScript.exe

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3236	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\rrcc9008352.vbe"
1⤵
- Badlisted process makes network request
- Executes a VBScript file via the Windows Script Host.
PID:3236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads