6f888cf4cb68afa200ef74dde20b1354487ef20d11b72b897646048a12c3e62d

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 17:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
autoupdate.wsf
Size 15KB
Sample260930-v5f2jast8l
SHA256 6f888cf4cb68afa200ef74dde20b1354487ef20d11b72b897646048a12c3e62d
MD5 880a54b81a01acaa580964209f1cbf88
SHA1 24520893a55b657a269bac447c127f514e876b21
SHA512 0c3bc0091a40fa75019ab22fa411f123c65863193743805d8b3d8092860e99fb2f00a0abcfc4e85eef63b6435ad3e8e451e772ab52238635a0152f2f81f63910
SSDEEP 192:QW7Sc3vKVG0cBCm8wS+cA8UlUwT1c8HsW3JRzD8413WwuygDy/XfIpFpt/kK+8yQ:Q+SevKRUCm8wS+l8UpBFzQ4xzT/IN
TLSH
T1A16276AD2C13823406F2E675AA27DABDF312412B9661856C745EC2DC6F721C806FF2DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4188	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\autoupdate.wsf"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads