70710bcf16884bdf2c0cf1ea0e50ded94ec05453a89e0aab2af7cb213e91529c

Analysis

max time kernel
900s
max time network
341s
platform
windows11-21h2_x64
resource
win11-20260513-fr
resource tags

arch:x64arch:x86image:win11-20260513-frlocale:fr-fros:windows11-21h2-x64systemwindows
submitted
25/08/2026, 13:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bluemagicv6.9/bluemagic/input/tk8.6/demos/goldberg.vbs
Size 57KB
Sample260825-qc2ejsam4y
SHA256 70710bcf16884bdf2c0cf1ea0e50ded94ec05453a89e0aab2af7cb213e91529c
MD5 705d7e5bb5a112c7ec58ddf13dd28222
SHA1 c1f6eba76a59367f2951a10d1d09c6ea790a0d0e
SHA512 1aefb171a7c49d67076eca2bfe35934f6ddfa062a00b45ffbeb814e6973488cf6ef0e8a3022b4b8a6e164407482b582b8cb29404f74edbb61063b8ca3ab80681
SSDEEP 768:TTzeOOfXy3h+rtki0F3C89jwXdH2RFBi8owvxRyx0bjbodHiIixMV8y8hovepq:TT+/y2thC32XdWRFFoEb3Iik5WI
TLSH
T1EB43640AE18542996233D7775571E005FE9B93FB46CFC51CB02E8968AF7060882FDAF9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2388	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\bluemagicv6.9\bluemagic\input\tk8.6\demos\goldberg.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads