e759d94de6a81dfa09d65ed95fc7cf0233092626a1dac0288f345c68407bcd28

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 18:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0osiutil.vbs
Size 55KB
Sample261022-wyc7qset21
SHA256 e759d94de6a81dfa09d65ed95fc7cf0233092626a1dac0288f345c68407bcd28
MD5 dd36e46ccb252d509a19178aa6db1dde
SHA1 c5f79b2f6862aa6e1f2d2a1300762036fd342603
SHA512 244cbbb0cb44c859b8269ecbc97408ec12f83058c4d520884b427d2eae84aa12410230972593dc607160faf22f803b463082372a479d7c4727474957390e8a3d
SSDEEP 1536:RQUiTq9H3rzvAidnu3BEHg5umpKu9TagcB15ezm55:OorT4EHs/9TagcB+a5
TLSH
T1D0431902F6924D62C9C90137FD994644722E5FE4E9FC31C769343B3CAEBB9870A6B146
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2392	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\0osiutil.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads