83a3eb0d31c5432845d22cb055c38126dfb0ef34a4d65f131a59f0234ed462c0

Analysis

max time kernel
298s
max time network
280s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/04/2026, 09:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DOC3560539665.js
Size 20KB
Sample260419-ldymtscs7v
SHA256 83a3eb0d31c5432845d22cb055c38126dfb0ef34a4d65f131a59f0234ed462c0
MD5 8a9903cba54aa93fed5fa6a34c9b0078
SHA1 b1d031be202714ec09d94c6d99459afd1c82587f
SHA512 700df256063ee3b814abb3a5782860e23ec8f5a118a5b92e69ef7868c9d7446ea9d02f95713fce9ff533d879aa7c4a9fbe88e538733110230fb52d52322cc566
SSDEEP 384:LHJ3M33M/GESBGkOG/XKSGIzSHZaGhxaCUOP2YpxE0e18H6cl69gw9KlXX5:LHJ3e3wGESBtOG/XKSGIzh6x8O/7E08E
TLSH
T1CD92094B316F267B123B903991FF0585BB326B834EFD0CDC2476B89235999298707F99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	2404	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	2	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\DOC3560539665.js
1⤵
- Badlisted process makes network request
PID:2404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2404-0-0x000002D19CFC0000-0x000002D19D01D000-memory.dmp

Download

memory/2404-1-0x000002D19D020000-0x000002D19D02C000-memory.dmp