b54378e29cdea0b95f1dd513269b16af061d1e4a40162dd8b71e19796237cc27

Analysis

max time kernel
298s
max time network
294s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PE-78663784232.vbe
Size 81KB
Sample260831-tmha7swalg
SHA256 b54378e29cdea0b95f1dd513269b16af061d1e4a40162dd8b71e19796237cc27
MD5 be96efa7aeaddc0d0a9445dabe62ca8e
SHA1 7382432592f6c31bb3ad75382307e02818abc4de
SHA512 e6a2b2449dd41b9d2dfe2c826d9a0a32869ad6d1cbcc847fee27c1074af77fe90d75e61de072fddec7141078346c0c733c9bd057f50c6874d907d18408f578ee
SSDEEP 1536:/oR57nFL+sW4ArOFg91Aym1lXnVRqughe5fIQkhpHbplZbLBRc54+/xBziwQIDs3:tRd
TLSH
T1E28372682244D0C3ABC53710F8EBBFE4A1647AE6BDDC478050244A51D7ADEE79C90B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	3436	WScript.exe

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3436	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\PE-78663784232.vbe"
1⤵
- Badlisted process makes network request
- Executes a VBScript file via the Windows Script Host.
PID:3436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads