b415b319048bbdd1a73134f2f8bb24364003495e8f1170a82d2ef949e9d13685

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 01:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/init.vbs
Size 2KB
Sample261113-bqfmnset3z
SHA256 b415b319048bbdd1a73134f2f8bb24364003495e8f1170a82d2ef949e9d13685
MD5 54d724d13c195ba2440a156104115ed4
SHA1 5ee9f9b8aa38c785d4fe50a2434560208ee72c73
SHA512 8f17f5224171147949f508e95acb02993b9b8a115f47ab3bfa7d6f0d2e222a2d27511372fe025ac714f153ba45f6353c789260bb54b8e85a1c61bc223cc237aa
TLSH
T1BF415452B24DBEF64E0FC992359753106543536D185A7117702F7BA12FFC3C9A8FA184
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3844	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\debian\init.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:3844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads