Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(Os₂Po₃)
Objectives
component severity, 85% confident.
command-and-control/dropper
ActiveXObject usage (JScript/VBScript)
component severity, 90% confident.
command-and-control/dropper/delivery
EXE extension in file path string
component severity, 90% confident.
command-and-control/dropper/execution
XMLHTTP/WinHTTP COM ProgID reference
component severity, 90% confident.
execution/interpreter/script
ActiveXObject instantiation call
Micro-behaviors
notable severity, 80% confident.
os/com
WScript.Shell object string
notable severity, 80% confident.
os/wsh
Instantiates WScript.Shell object
notable severity, 88% confident.
process/create/macro
Shell or CreateObject invocation
notable severity, 90% confident.
process/create/shell
WScript.Shell .Run launcher
Identity
| SHA-256 | 1a2b27f162b53678e1c01fe69eb80bbd94be99c6cc56d38d7c4e538da740cc9e |
|---|---|
| Filename | 1a2b27f162b53678e1c01fe69eb80bbd94be99c6cc56d38d7c4e538da740cc9e.sct |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 14 May 2026 13:34 UTC |
|---|---|
| First analyzed | 31 May 2026 01:19 UTC |
| Last analyzed | 31 May 2026 01:19 UTC |
| Last updated | 31 May 2026 01:19 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 52045 |
Not seeing what you expected? Let us know