66eb748c5bb2f66a90fe1da826c96186a03d0ac3567e6ca9df7e790c275455c0

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/04/2026, 13:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MODELO 303.js
Size 44KB
Sample260417-raqqpsgt4p
SHA256 66eb748c5bb2f66a90fe1da826c96186a03d0ac3567e6ca9df7e790c275455c0
MD5 6bed8c5830c72d851b276ebdf1923868
SHA1 7747db770022ee4dc2f3b96655349a8bddf32f63
SHA512 913841d11c84f286e25538c9adc62df988bb73389eaae40d72becd42933338175d954a44a4c9491988b4c7232f85f651077721316fc8338e193aadcb95281a4d
SSDEEP 768:fy83iEUCuqlDaZq7J6ARvskkgqZad0AItuQRB1ZckS:fycxUC7DHzREkkLIdJMzS
TLSH
T1F713829DB2EFB3544B0A31B32D57B152E16ECCC9B50C8140F5E6ACADF82CA48D479A74
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	4524	wscript.exe
12	4524	wscript.exe
31	4524	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\MODELO 303.js"
1⤵
- Badlisted process makes network request
PID:4524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4524-0-0x000001E097D80000-0x000001E097D8C000-memory.dmp

Download

memory/4524-6-0x000001E097D80000-0x000001E097D8C000-memory.dmp