596f9501d790c67fe739d517aec0ef156f8463bad12c4e119082c6b66b384052

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/09/2026, 15:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__9c031483784b849be5d0caf86bcff063.vbs
Size 32KB
Sample260919-sw8dbaseqh
SHA256 596f9501d790c67fe739d517aec0ef156f8463bad12c4e119082c6b66b384052
MD5 9c031483784b849be5d0caf86bcff063
SHA1 22928b3bd344454b6dd798e108cde843963315fe
SHA512 d6fb6d6d7c236e719646e328ef0c17023851b094a91630a988cfa1867e09aaed9e26831794b544d528f5bfd709e0ecd5f1803473421f89402be832f4d599c9b6
SSDEEP 384:UaJicjrvomhB+daCGahYci2iErY2OjXoxa23IB/taiBKORNs5WuAUNOyAWYAl:UEjomhB2hYcY2Oj4xa4IBVaaDcJbl
TLSH
T126E24458F755E04882F27BCDDA7511B087A59F13FEC18D27A22E2361DCAEC2DB66140E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4468	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\jaffacakes118__9c031483784b849be5d0caf86bcff063.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads