Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
23/08/2026, 04:37
General
- Target Gereksinimler ROVİDA/Defender Control/Defender_Settings.vbs
- Size 313B
- Sample260823-e88mysxwe1
- SHA256 af42a17d428c8e9d6f4a6d3393ec268f4d12bbfd01a897d87275482a45c847e9
Score
5/10
Malware Config
Signatures
- Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
- Modifies registry class 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Gereksinimler ROVİDA\Defender Control\Defender_Settings.vbs"1⤵
- Executes a VBScript file via the Windows Script Host.
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx