09205feb29d2de8d0ac39ac5f735a8e1847f7abb0de0fa15cfc733af02f30626

Analysis

max time kernel
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 15:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
465d9e29fd4e7f614deb287428e1b595d291d535de4dfd571ab49da68314bade_offset-manipulation.vbs
Size 2KB
Sample260913-s9554shr4w
SHA256 09205feb29d2de8d0ac39ac5f735a8e1847f7abb0de0fa15cfc733af02f30626
MD5 a5cd0925c9e9b42c141546e7c7bb314b
SHA1 01ae51727c654df6709773570c214dbd4db6ff8f
SHA512 d758b7660b92cd224e34e2b710b5d36f175ffb3748280b83e41a373898da57196016f2725f6010fac243573e47c8196f5d008936ad517318e8544e1ab1f0d7fe
TLSH
T14F51D935DC5C0C9DE483C88BABADB5DE6476B052B7F038E0149C0B55AC8A718A842F79
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4260	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\465d9e29fd4e7f614deb287428e1b595d291d535de4dfd571ab49da68314bade_offset-manipulation.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads