c646d55657a20d7d164bad2471040eae1b90de5b9aad2df06ddc0c07a5f83a12

Analysis

max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debian/kinfocenter.vbs
Size 204B
Sample261113-pc2vmsad68
SHA256 c646d55657a20d7d164bad2471040eae1b90de5b9aad2df06ddc0c07a5f83a12
MD5 b07bba59675ca2bec72fbd4c6e30d93d
SHA1 a0027c53a7e775e04085c7f7a78df197e9cd3c2c
SHA512 13ed8afbec16add3f209b6e0ef5ea690cc73c43407f93c720fda8155f039ace2ba438156713a29f9ca023347c35001fa9c56c8122f28b35ef08f7b363ceb8f28
TLSH
T109D01220644D4E730DC71DB0EA42BA5E3A9172A8873C562D301271E6F1681EF34E475E
MD5 SHA1 SHA512 TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2548	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\debian\kinfocenter.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads