2e9cd8c26bb3ccbe6e6804a6f7f847f3a97a0c91d61f805f103c632fce6c4b51

Analysis

max time kernel
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 15:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92ab54d8ddfe5a408bb519d720fd58b0745c405991e41ec420f9132cdce57e2f_offset-manipulation.vbs
Size 2KB
Sample260913-talsvshr5s
SHA256 2e9cd8c26bb3ccbe6e6804a6f7f847f3a97a0c91d61f805f103c632fce6c4b51
MD5 460eaceced6c8b97d60c8356e0c15d35
SHA1 4da8a21f5b34cde8691145f416f517cec38d9a73
SHA512 cfb6a436a61182bd3aad003f9bfda7d87e4422dba425c8b414459a4bef820dde8dac54259140a641385e4affd8f9a5942f82be59fadfadc310449ecc819531f2
TLSH
T13D41B576D84C0C9CF482D48E97D57AD945363062EBF038D4245D0B817C8FB6CA942FB0
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
5076	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\92ab54d8ddfe5a408bb519d720fd58b0745c405991e41ec420f9132cdce57e2f_offset-manipulation.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:5076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads