93a180ec5678568b9d071861338cc3572ac8c95cba3f7887ab597565c722602f.vbs

Summary

Methodology

The sample was executed in an isolated, instrumented Windows VM (host-only networking with emulated C2 responses) while process, file-system, registry and network activity were recorded. The verdict is derived by correlating observed runtime behaviour with static indicators. No sample binary was uploaded or redistributed.

Dropped files (1)

• C:\Users\lab\AppData\Roaming\SetupFiles\vijewyufveonabghulluonouceyasi.exe

MITRE ATT&CK

Indicators of Compromise (defanged)

• 3b750cb6c9f401ec5780ae615552be53f879d373
• 9ebf0e1a54cdf15a4bcfcbfbdc12958f
• C:\Users\lab\AppData\Roaming\SetupFiles\vijewyufveonabghulluonouceyasi.exe

IOCs (JSON)Copy

{
  "sha256": "93a180ec5678568b9d071861338cc3572ac8c95cba3f7887ab597565c722602f",
  "family": "AsyncRAT",
  "verdict": "suspicious",
  "confidence": 75,
  "signals": [
    "executable-drop"
  ],
  "attack": [
    "T1105"
  ],
  "dropped": [
    "C:\\Users\\lab\\AppData\\Roaming\\SetupFiles\\vijewyufveonabghulluonouceyasi.exe"
  ]
}