981920ec8b3445ce21791105d99812cac3a9909a07d8ccb8176098a9f9cc451c

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 03:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
extension\lib\fhm2lp6q.js
Size 4KB
Sample260426-dmembaev5r
SHA256 981920ec8b3445ce21791105d99812cac3a9909a07d8ccb8176098a9f9cc451c
MD5 cd4fe1bd3380e926a4ebe0a900651b78
SHA1 9049ee7cd39c985e7baa8d2dbc19b49fe49567c9
SHA512 9bb91c22492933641a619f36729bacbedb4f2bd4d76a81e7efdb0d73fe02e48684bdde1daea53ee669001fe2d3c408b93b200bfa703c9656632b9d4389d74ab7
SSDEEP 96:ZB0ftOSJoyhKNywq2ULAY5TD9OoKJhyLMMx4pBdoACWjOojJ:ZKtOSJvyqTd5H9OnJhcn2BdoAfjOqJ
TLSH
T1D091240D58F710268623A0FD618BD805736090176ACEDE25FF0C06546FC8B7E88F2ED6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\extension\lib\fhm2lp6q.js
1⤵
PID:3500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3500-0-0x0000029917C00000-0x0000029917C31000-memory.dmp

Download

memory/3500-1-0x0000029917C90000-0x0000029917C9C000-memory.dmp

Download

memory/3500-2-0x0000029917C00000-0x0000029917C31000-memory.dmp

Download

memory/3500-3-0x0000029917C90000-0x0000029917C9C000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads