16ba3239f4c9d0cee645aee1e19b51ff2d17a16d22a0093cdec8bc063f46371b

Analysis

max time kernel
149s
max time network
132s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
23/08/2026, 21:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Roblox7-Revive/third_party/luau/Common/include/Luau/DenseHash2.vbs
Size 26KB
Sample260823-1twwha1bme
SHA256 16ba3239f4c9d0cee645aee1e19b51ff2d17a16d22a0093cdec8bc063f46371b
MD5 ecfa744504d1d2ab6e90622a8174dd9f
SHA1 579386adc621e4cdbc4c28c05286d811cc64cc7c
SHA512 fff54c93cd8ebd539431728da1ea8777499faf5baf040ac1ee4a7878aaf797af6fdef4fe0c74b4b43564acc8c8f3b7f71e7c05e7fd39c5c880899902288577b7
SSDEEP 768:ThBx13LEnj2AYwncplOlJTkXm9Qx4/Y8J3YsHYC:T/x17Enj2AYwncplOlJTkXm9Qx6JFHYC
TLSH
T154C2B58621D736209767E2F58B8BD412FA11A013721DCD947A8E4220FF53874EBBA7F5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4752	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Roblox7-Revive\third_party\luau\Common\include\Luau\DenseHash2.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads