f034b286b9d16d5e7ce3ffe0e3ddb1d1b3bab392d210287c295bc856bc216393

Analysis

user interaction
yes
max time kernel
149s
max time network
42s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
27/10/2026, 03:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Full Decompiled Source/decompiled/Important/Protection/VectorConstants.vbs
Size 1.8MB
Sample261027-d4lf7a1thv
SHA256 f034b286b9d16d5e7ce3ffe0e3ddb1d1b3bab392d210287c295bc856bc216393
MD5 41e4c67d93a7417e1b31dbb2a61f83da
SHA1 268b4f6a906c75d1447ebfb553f46638557a307d
SHA512 b01ddbbff036e2e6c8790a64c0f4aec13c48ef4fea5fb846a35d2a5d67e39657a4e9c19519fba8f5b571e32a935910bf6d63ed65c3d7a1360561c798981c912a
SSDEEP 6144:qkiLws5av/baNQGqfR8la6to1nnSfZV56kp6Ner74srKUnoVT1FicdzFAbOBp:qkeX5av/6Q7cp4er8srJn4XdBp
TLSH
T11C9510417F4F803F2BDA1546C5706909EEBEF478A2F864E2F89B5911DA91119033CAFE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2964	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Full Decompiled Source\decompiled\Important\Protection\VectorConstants.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads