Analysis

  • max time kernel
    149s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 12:34

General

  • Target
    Reader_EN_Adobe.vbs
  • Size 4KB
  • Sample260910-pr95kacl4w
  • SHA256 9da9b990d1eedf3747b0e7eef9d0ebd55c07080028696093b74c2d0dad12e0cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Badlisted process makes network request 4 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Reader_EN_Adobe.vbs"
    1⤵
    • Badlisted process makes network request
    • Executes a VBScript file via the Windows Script Host.
    PID:2072

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads