9391e2d313c67b92382be85859811f2c8dd96af85d9ef02f367115bf4b534ea5

Analysis

max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 23:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
game/screens.vbs
Size 43KB
Sample260910-24vlvsxcma
SHA256 9391e2d313c67b92382be85859811f2c8dd96af85d9ef02f367115bf4b534ea5
MD5 7ba06f8725ccd36265712a36f10c029d
SHA1 9e48649e0339afac46eb0c975d3ff339df8f1f7b
SHA512 92d3523d486bde160b544410d3790d1c8a59d6e95d19dad8b79fdd72ede34c5e6252d807b490313be8e43e0e7fc7b98721cc31f57d0ec04c7b5e05f4d2281d2c
SSDEEP 768:mBpHUGGkR1OjoosKIx54EvCnXgsTAlMQ2jgASdnLwnc8QczVpnZAZZV3i2eSS:mBpHt9anXjTM2jgASdnLwnQczVpnWZZy
TLSH
T1E113A7D3CC4B9A254372C40ECD979554EB5802975FB37EC231ADC6B8AF30B9442AA5CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1416	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\game\screens.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:1416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads