5811e14c875f7118a78af9cad1fd3d7fa3902117c2cad1ade05f656464dd0f46

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/11/2026, 17:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
EvolveInternal/Dependencies/Luau/Common/include/Luau/DenseHash.vbs
Size 26KB
Sample261104-v334aaes8n
SHA256 5811e14c875f7118a78af9cad1fd3d7fa3902117c2cad1ade05f656464dd0f46
MD5 da4272c79e5682f67ade0d6d835fa0e7
SHA1 963646c989a46db5bcbd55b7159026caacba3196
SHA512 8ff820d8b00fbcad1aa68591ea1a98a668b772d9341808a3561be345d3d35e32479f68d479b2baddb6e1c5b766c5320ba645003ef57134dd8d22b17ca8ec00cf
SSDEEP 768:rhBx13LE/j2AYwncplOlvTkXKXHwR4qYWJDYCHYC:r/x17E/j2AYwncplOlvTkXwHwRTJhHYC
TLSH
T194C2A54621D736609367E2F58B8BD052FA00A003B25DCD987A9E4220FF13474EB76BF5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4408	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\EvolveInternal\Dependencies\Luau\Common\include\Luau\DenseHash.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads