c962815317baec04e0f3d27efd4faa87c2c8aaa8203d03068cd43fed5eb29665

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_Backdoor.Win32.Hupigon.cgxz.0ab52b4cc46f31f8cb1a9cc2fd4dc324.vbs
Size 6KB
Sample261015-wzbejadf85
SHA256 c962815317baec04e0f3d27efd4faa87c2c8aaa8203d03068cd43fed5eb29665
MD5 710e9e52921428390b2aa4f5b29d5d11
SHA1 eb45e01b24a5b8a0ea50742cc7feb671b3a4b158
SHA512 4dcb3918ec35ce835477b06e0b63c7956ace3f12309c5f455fe0495d1267c83c5c886b330378152be411ec98c0a76a85787ec3316bcb1b522063061a119802be
SSDEEP 96:9LXRvDHAQ098Uxu9p4lknK0u3DiUgTFbk17:9LhvDHv0GUxuAlknUiUgJk1
TLSH
T167D1CB894804349DE231D16E1661E95A176DB42368E30C7BFD1D56C4CFB60A8CBE36AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2364	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Backdoor.Win32.Hupigon.cgxz.0ab52b4cc46f31f8cb1a9cc2fd4dc324.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads