b8ac6c849dd7ee771f9d95718c3b9fc289872f05bfb1a36d32fde8edcba5e1c4

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/10/2026, 15:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WindowMeThis/_internal/_tcl_data/opt0.4/optparse.vbs
Size 32KB
Sample261012-snfckadh92
SHA256 b8ac6c849dd7ee771f9d95718c3b9fc289872f05bfb1a36d32fde8edcba5e1c4
MD5 403ee782437d9e848593a8c9a143863f
SHA1 8994c3fe6cccf42a72f1b08e95f89621ef6163ab
SHA512 feb740cca1a5243347beeb86b6f29582f85b4649050c8a2a65997aca75e2d7dd70f53568ecbb5a25a9947239b3ae690de615ffffa8e44c6b9020f2e0bae457d1
SSDEEP 768:4DXxAptehhnN+ZgG6sRclBAdtsoLKiF64aJQ2L:kOSh14pCBAdqva5aJvL
TLSH
T192E28226BA45629D26B252368E798451FF3EC2735296407CFC9C817C3FB0942C6BEBD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2204	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\WindowMeThis\_internal\_tcl_data\opt0.4\optparse.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2204

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads