07016f40c0f0d853efcebb79889a61b16bd2c319f75a24d195fcdf84c2646184

Analysis

max time kernel
149s
max time network
107s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/03/2026, 07:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4bad60be9078d151baef09e49a9b7bd1.js
Size 552KB
Sample260308-h2blesc13z
SHA256 07016f40c0f0d853efcebb79889a61b16bd2c319f75a24d195fcdf84c2646184
MD5 4bad60be9078d151baef09e49a9b7bd1
SHA1 a6f8604c6d966e7e467153b956ca1c6f184c7f81
SHA512 969b11b31672c5417bf60af915ec1884d65c91b70a1582c955923113c86c8d7a26ae4f13c784d09e758945f3a4a5b6ba01ef4c2a1ca6cee778a1aee617bef2b0
SSDEEP 6144:uY2CsWVuvscQJwlRCO2qrsxjVKZKIlwmBxt64/5TvG973:uBuuvscWyZrshiK6jtxhvg73
TLSH
T1DDC4D9ED2EC2F59D0F429933F21AF06EF4F488F0636A4C2AA1DC1C48E8516D5EE55639
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	4676	wscript.exe
3	4676	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\4bad60be9078d151baef09e49a9b7bd1.js
1⤵
- Badlisted process makes network request
PID:4676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4676-1-0x000001B1CE8E0000-0x000001B1CE97E000-memory.dmp

Download

memory/4676-2-0x000001B1D0240000-0x000001B1D024C000-memory.dmp