e6a4ae896f53129e7f06ef3151e49e6242d5aa1588d3fd15d76064e918794759

Analysis

user interaction
yes
max time kernel
8s
max time network
9s
platform
windows10-2004_x64
resource
win10v2004-20260513-de
resource tags

arch:x64arch:x86image:win10v2004-20260513-delocale:de-deos:windows10-2004-x64systemwindows
submitted
10/09/2026, 17:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vbs malware/your doomed.vbs
Size 231B
Sample260910-vtrc5aem9v
SHA256 e6a4ae896f53129e7f06ef3151e49e6242d5aa1588d3fd15d76064e918794759
MD5 16d89fe345c21cb39d172777cb51de23
SHA1 8bc6502a08f94d04d78e2b28ae1ff98d4795f9a8
SHA512 6a0dbc5e546c348eb023b4ba5acd64b8e5049d5c9c77f09d121de7de7564c2e0c6bf8185bf693047d80f261a6f571e0f10d5db4b23e2784d7e24c0ab6dc3953b
TLSH
T1A2D0A71EFD8D55055215E2C871D96E729807A01E87B9EA390F74C5BC63B4281506C6AD
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4052	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\vbs malware\your doomed.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads