401235f92a77eee5eca71444611cf3520cf76f67355f426e0f1bc38dae799e06

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 15:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
station-2.1.1/src/CMakeLists.vbs
Size 848B
Sample261001-slbxcsxtay
SHA256 401235f92a77eee5eca71444611cf3520cf76f67355f426e0f1bc38dae799e06
MD5 aa8ba971ed68838cf383bfcd98735df6
SHA1 7e0d7618dca717ee3f9f86f7f83967a90a1cd7aa
SHA512 46c8488202f0a4c28334344e178b05f44691b1ec9a38b598e30e9e17198234718cfe7bbaff7f76215c87f52e4a369187b5f800b87ff58dc05d799f35a9059cf3
TLSH
T14F01EFC939480B001E9A176B913A45A92AAF9503BFD710C73AF58246150EE4D076FDB7
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
6112	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\station-2.1.1\src\CMakeLists.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:6112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads