9e7a8f4bbbe17731a5dcbfe56f56f6100ed0cac5fa9733bd77b6be06a4bfa8b9

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 14:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vesta/src/simulation/hitboxes.vbs
Size 12KB
Sample261003-rxrlhssthy
SHA256 9e7a8f4bbbe17731a5dcbfe56f56f6100ed0cac5fa9733bd77b6be06a4bfa8b9
MD5 52523ab61a9689310bb0234e5873fa06
SHA1 d24838222f6ac3755842b459f4d15913aa8f6d65
SHA512 421073e0f84275adb083c00e751d8326bda408fdc63937afce486103ab06a3db06359b58bfac7b73aaf72c3bc6c3053f139ae8f9f08404c4e0e70fd9e34260c7
SSDEEP 192:UJnDu+vzaKJoRaERIqiugCsrXiDHnYtygDroWMC0gj6pzpH:Uha6aKJoWCM2+poWYJpzN
TLSH
T1424284C45F7DE55E1B29609DB92428D938BDB8322794A6F3FC0D8258B9D101AC27CFB1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1420	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\vesta\src\simulation\hitboxes.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:1420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads