3b7215c7d005670a5e5ef15b0c5d20410e9d536dc6636cfb2dafc0db308857ab

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 07:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
epub-ai-translator/backend/app/jobs.wsf
Size 10KB
Sample261030-jn3nesxtbs
SHA256 3b7215c7d005670a5e5ef15b0c5d20410e9d536dc6636cfb2dafc0db308857ab
MD5 f91034dacc7dd2b770fb32e927f8e268
SHA1 7c2d0fe6af262c777ee51da38fa2a59abdeafa02
SHA512 208e2dbca349a8a86c01505ed13d2db3c754b22b350cf79b3551f34a76eff7cab0ba301eb9f165e7c9143e9984941e82a86ef24297ca119e188ff738b7e2703d
SSDEEP 192:F+zhIPUfenfujVpYqmVvMW0Xo3pX8QMRx4oDWvFjYI/0CU1uNLCp+9GpWqBIWQMm:lLRVBDMjVCBNlwxvu
TLSH
T1CD224F6DDC6908155397EA7D4DABA2A0E35FFA430B019821BD0D427C1F4B13D63ADE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4464	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\epub-ai-translator\backend\app\jobs.wsf"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads