5cde0fa88d9ab654714a9bd06d4440fde080314b2f36c7a7224a76fb8ed0305e

Resubmissions

29/10/2026, 18:10

261029-wsjgkaey6r9

29/10/2026, 18:00

261029-wllncadv7v9

Sharing

Copy URL Twitter E-mail

General

Target
VBS.cmd
Size 96KB
Sample261029-wllncadv7v
SHA256 5cde0fa88d9ab654714a9bd06d4440fde080314b2f36c7a7224a76fb8ed0305e
MD5 851ecaffc08a4ea60d3a4e691bb32d07
SHA1 73013bd0202c85e3b6b59d87d004b3abe3b81167
SHA512 9e3d70d592d89971ce537c39313bf5b20fe2797a29bc7cc4b82eebae78b0b91ab89c20dda269df9ab95ee2b646d653c2298a0f422767e95ad977b89115f89ac3
SSDEEP 1536:BF9Omaq2Yr+tlouo6pKOUN0kpSrdk6dQZ9ash:3Kfts
TLSH
T1F5A3B7123908185449B6B4B7AD63C20BF799C0C34162AAED78CDD06CBF7516BB2F56EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery execution

Malware Config

Targets

- Target
  VBS.cmd
- Size 96KB
- SHA256 5cde0fa88d9ab654714a9bd06d4440fde080314b2f36c7a7224a76fb8ed0305e
- MD5 851ecaffc08a4ea60d3a4e691bb32d07
- SHA1 73013bd0202c85e3b6b59d87d004b3abe3b81167
- SHA512 9e3d70d592d89971ce537c39313bf5b20fe2797a29bc7cc4b82eebae78b0b91ab89c20dda269df9ab95ee2b646d653c2298a0f422767e95ad977b89115f89ac3
- SSDEEP 1536:BF9Omaq2Yr+tlouo6pKOUN0kpSrdk6dQZ9ash:3Kfts
- TLSH
  T1F5A3B7123908185449B6B4B7AD63C20BF799C0C34162AAED78CDD06CBF7516BB2F56EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

execution discovery
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Modifies boot configuration data using bcdedit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Modifies boot configuration data using bcdedit

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2