ecbf901d30a9a01ae6fc741b4c41fa6d7afaf1c1ad9561e068e55daee67b8752

Analysis

max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 03:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
extension\popup.js
Size 48KB
Sample260426-dmembaev5r
SHA256 ecbf901d30a9a01ae6fc741b4c41fa6d7afaf1c1ad9561e068e55daee67b8752
MD5 19868505079807213a425d7810c182c8
SHA1 661c4376f789129fb519f370e4daad86a2bb4ea4
SHA512 26543539150cf1bf276ed405506f6d94d66e96cda07f7d6c009441eaec1dd3dbc3da2235c9ea797d3f9d283fdcf1a01e30cae3ea4c54e825e647242eb2cd9142
SSDEEP 768:CGvsmbGLhpFl02XbcT/gXnetwxJiceIkpx9X2T7N7hTpRLKOSu:C6nIdk/gXneW/eIkpx9X2T7N7hVQS
TLSH
T1A12382AE78F720729A63B87D579F6005B235C423044DDD20BC5CA224AFE067956F2FE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\extension\popup.js
1⤵
PID:792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/792-1-0x000001E8AA1A0000-0x000001E8AA1AC000-memory.dmp

Download

memory/792-0-0x000001E8AA140000-0x000001E8AA19D000-memory.dmp

Download

memory/792-2-0x000001E8AA1A0000-0x000001E8AA1AC000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads