741326b9c8b4629a653388b3933499f402ec3c1990335d39dfb9819240f834e4

Analysis

max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 23:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tsinit.vbs
Size 412B
Sample261006-25mmmsg15v
SHA256 741326b9c8b4629a653388b3933499f402ec3c1990335d39dfb9819240f834e4
MD5 5690459d716145d026a2528a9a548dfd
SHA1 afd5173ddc8dfc665b755be3b206c2bae823c409
SHA512 0bcd27d7ab59aae586725316332a6b1e68f661794fef059b957d2cc3bf201b6d974f863b0283d6d9466b560b051ba421a4c771e5d483596ae66f2fe67e60001b
TLSH
T12AE055982FFB9CB1EA55BC62B1F1B8249941B92328F1A67A10C0639CD44EEDCC520550
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4512	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\tsinit.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads