a9d249832eb9be4c13c4bbadf7da5f20dd2b42948925607cd9c90c491c95766f

Analysis

user interaction
yes
max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Info.vbs
Size 229B
Sample261001-tk3jcs1sat
SHA256 a9d249832eb9be4c13c4bbadf7da5f20dd2b42948925607cd9c90c491c95766f
MD5 c37587537819fe3650f6f1d92d27e4e5
SHA1 ecbb82f758668311313e073893879166b250ad19
SHA512 9c8b457a06b9065928d693b8d6e7c5325fdb080f107b470df7d59260163c3d49bbc4c8f32ecde73260b3d60c80c0579d6ad8d15aaa17ac5ef32ff6fd710a539a
TLSH
T12CD0A7C4201BD1D81EC043DA932D5AC0801D02495679D9FF6F6CD0D51B01FFC50101B7
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1744	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Info.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:1744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads