0ed13a52c5f459731930a549e8f722dc64176915904f1e41eefd2e1d1d28214c

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 15:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Phantom-main/Phantom/Properties/Resources.Designer.vbs
Size 2KB
Sample261024-snvr9act8k
SHA256 0ed13a52c5f459731930a549e8f722dc64176915904f1e41eefd2e1d1d28214c
MD5 ef6badce8e1c797d0c1a66afa37aee94
SHA1 6a10f8a888164ed705fd18b93f6bbc02dbbf2d89
SHA512 0ec64d6f93ba9c54abe5eb4aecb270dcffc034ee6c84da17ced741f1124fe63f777744dc8253eae13c72229cc87df51db9ca20d193440670f9b5b91dd6dd8573
TLSH
T11451CCB75F94C1320D34D59B9700F451CB672123C63DD878F8AE02655FB6390436EDAA
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4652	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Phantom-main\Phantom\Properties\Resources.Designer.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads