b59622e8089a72a3523183009aa299380903204e548c7e9c827dd33412102433

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/11/2026, 03:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Torrent (1).vbs
Size 951KB
Sample261114-d65b3sct2y
SHA256 b59622e8089a72a3523183009aa299380903204e548c7e9c827dd33412102433
MD5 5977d07d68fddc7895931f8394324b2d
SHA1 0d708e7b7a6a9d42d236ed374b88d314e978a6f9
SHA512 a69b11ded69edb1a97cd73a46528f4652abecb6ba69f62a8c9cb0526444c24113431e1cbdda62137b90c238a1f17a7696cf71dd0ddd61bf8258d69df9dec4a79
SSDEEP 24576:g0w3385vo2edHhdW2zDNhIpaECMJENCdTMjj8g1kF:xw3oWJXMJE8ZF
TLSH
T1A3252BB10243FDE77B2B1D88D04035542C98795BAB20919CBACC17DEB2EA95CDD6EDB0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2008	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Torrent (1).vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads