0b794ba1241f122456fa9c91882d3c1b30c52a895c4525a0095634386256dedf

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 11:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
win2020-2024(一键激活)/CLion激活.vbs
Size 2KB
Sample260930-npg6bs1ycx
SHA256 0b794ba1241f122456fa9c91882d3c1b30c52a895c4525a0095634386256dedf
MD5 c6ced3f8f41290b8530ee9c0da5a4496
SHA1 ac2a077227809eef296b3879b9c96d2646a50b6f
SHA512 413a6ec59f6938506fa9474083ca8a7d80849571879d723387964982d292b4f7deabea19284aee173002c42afeca2393456cabe5b39bd24edc6ff10041c8afac
TLSH
T1375123D6BE225B9101B1934954905C9DFBED62F34212826D3AAC44A88F36BFD86F0DD8
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
5272	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\win2020-2024(一键激活)\CLion激活.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:5272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads