7edf2bd80117c1cbda7ec2d0dd8850c68a2ed4634286404afef202a832e370ff

Analysis

max time kernel
149s
max time network
158s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/04/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
wp-admin/admin-header.js
Size 8KB
Sample260422-pl8dsabt8z
SHA256 7edf2bd80117c1cbda7ec2d0dd8850c68a2ed4634286404afef202a832e370ff
MD5 6cf9030deced5093707fb0ed5f135aca
SHA1 12d23dda690e9ea73d31286d0ef83f8d8fc879d5
SHA512 7ea967fbe847fcab5e3fb207b94ab104673510fbf2670641b2b31bcac9a799fd9b8a7b3aa137bd848ecb6add3e606f193573a23e9d3ea6e73e0c0087c5c3699e
SSDEEP 192:h/H43xQB/m4TxUIddqqQsY65ifPyWoAXZPXt/VC46q:943xQB/myyYd5iD/VCXq
TLSH
T1B70266451CF2673388A22DD166D1D278762B410BB3D52855BCF941F89B4136C8DFAFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\wp-admin\admin-header.js
1⤵
PID:1212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1212-0-0x00000167EFDF0000-0x00000167EFE21000-memory.dmp

Download

memory/1212-1-0x00000167F1720000-0x00000167F172C000-memory.dmp

Download

memory/1212-7-0x00000167F1720000-0x00000167F172C000-memory.dmp

Download

memory/1212-6-0x00000167EFDF0000-0x00000167EFE21000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads