10248cdafbb80476a630666882cab21e54f949c9515d7350a69c5adaf1ebf7b8

Resubmissions

04/05/2026, 04:14

260504-etmryafy9q7

04/05/2026, 04:08

260504-eql18sfy5n8

Analysis

max time kernel
598s
max time network
544s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/05/2026, 04:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
background.js
Size 5KB
Sample260504-eql18sfy5n
SHA256 10248cdafbb80476a630666882cab21e54f949c9515d7350a69c5adaf1ebf7b8
MD5 ee6d8ef7325d4cd017f6a876147d6f88
SHA1 c9f8e088e4dc0aaf165ab7cbcd9bd13df9b44d17
SHA512 9af4120a366dbb36bc7d45e969b3017e2a3fcedac897ddcfa58ba7a7fbae0cd1fcd177273734d4a5c2e0d37a4c775523ade8711e98c28b378c093a2bbc52c3a6
SSDEEP 96:Z5xMZoZeQABG3NdxjcRrZ28+l1e4TKbjfnfihUtJf1yOfLag+XoRluYALXNtyKl5:OYeQsIN/228+ze4+bW+0+6XGluYAhF8W
TLSH
T1CEB1E76C6AF9E076F2546C8D50352313641C3A276CBAE0D1F17D4F761E68A8289AD738
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\background.js
1⤵
PID:3160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3160-1-0x0000021B52CC0000-0x0000021B52CCC000-memory.dmp

Download

memory/3160-0-0x0000021B53150000-0x0000021B531FD000-memory.dmp