Resubmissions

04/09/2026, 00:01

260904-aaw42scd281

04/09/2026, 00:00

260904-aak2saybrf1

03/09/2026, 23:50

260903-3vsxcavsdz5

Analysis

  • geolocation tags

    cacanadananorth-americatoronto
  • max time kernel
    599s
  • max time network
    462s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/09/2026, 23:50

General

  • Target
    script.wsf
  • Size 31KB
  • Sample260903-3vsxcavsdz
  • SHA256 9647c21e9326a47869c1a7101ba29b8f6a04d47bd8abf5c209d36b479a9673a2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\script.wsf"
    1⤵
    • Executes a VBScript file via the Windows Script Host.
    PID:2036
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:4708

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads