38c3f4729f1800decf31be91276c7f110a81541fa572e59bfd7d9c691f43e664

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 20:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WFGUm6ySSrSB.vbs
Size 122B
Sample260826-yyp8eaam21
SHA256 38c3f4729f1800decf31be91276c7f110a81541fa572e59bfd7d9c691f43e664
MD5 f613a0fe4fdd8b40df88ab74ae561c57
SHA1 a99fef8878e6956f5a0693f8d496953eb5349334
SHA512 5e53f3b7cb536baca9ca329f010f62a02a7846c53346546e57c688a6bcbe7370ec09177cd5e1c3f4243829e9316cc5f60422fb4638365de2843d320cf1b3cbf3
TLSH
T1F3B09296A659C927831F62C382628A2996A49B5870349A3A1911D9BA32943888F22457
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1300	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\WFGUm6ySSrSB.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:1300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads