Overview

overview

8

Static

static

5

WindowsApp...0.appx

windows11-21h2-x64

wnc/cs/Sys...es.dll

windows11-21h2-x64

1

wnc/de/Sys...es.dll

windows11-21h2-x64

1

wnc/e_sqlite3.dll

windows11-21h2-x64

1

wnc/es/Sys...es.dll

windows11-21h2-x64

1

wnc/fr/Sys...es.dll

windows11-21h2-x64

1

wnc/hostfxr.dll

windows11-21h2-x64

1

wnc/hostpolicy.dll

windows11-21h2-x64

1

wnc/it/Sys...es.dll

windows11-21h2-x64

1

wnc/ja/Sys...es.dll

windows11-21h2-x64

1

wnc/ko/Sys...es.dll

windows11-21h2-x64

1

wnc/locals...in.dll

windows11-21h2-x64

1

wnc/msalruntime.dll

windows11-21h2-x64

1

wnc/mscordaccore.dll

windows11-21h2-x64

1

wnc/mscord...03.dll

windows11-21h2-x64

1

wnc/mscordbi.dll

windows11-21h2-x64

1

wnc/mscorlib.dll

windows11-21h2-x64

1

wnc/mscorrc.dll

windows11-21h2-x64

1

wnc/msquic.dll

windows11-21h2-x64

1

wnc/netstandard.dll

windows11-21h2-x64

1

wnc/nxtweb...t.html

windows11-21h2-x64

7

wnc/nxtweb...est.js

windows11-21h2-x64

8

wnc/nxtweb...t.html

windows11-21h2-x64

4

wnc/nxtweb...ect.js

windows11-21h2-x64

8

wnc/pl/Sys...es.dll

windows11-21h2-x64

1

wnc/powerr...in.dll

windows11-21h2-x64

1

wnc/pt-BR/...es.dll

windows11-21h2-x64

1

wnc/ru/Sys...es.dll

windows11-21h2-x64

1

wnc/runtim...er.dll

windows11-21h2-x64

1

wnc/tr/Sys...es.dll

windows11-21h2-x64

1

wnc/zh-Han...es.dll

windows11-21h2-x64

1

wnc/zh-Han...es.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    163s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/05/2026, 13:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    wnc/nxtwebapps/boot-to-cloud-connect.js
  • Size 1.6MB
  • Sample260504-q46hksc19w
  • SHA256 ae4ea3d408123d4a5fcf4ed712c0ffe1f0b070f4002500383d787c853ff12cd2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
execution

Malware Config

Signatures

  • Badlisted process makes network request 1 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: JavaScript 1 TTPs
    execution

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\wnc\nxtwebapps\boot-to-cloud-connect.js
    1⤵
    • Badlisted process makes network request
    PID:2008

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2008-2-0x000001A157020000-0x000001A15702C000-memory.dmp
        Download

        memory/2008-3-0x000001A157020000-0x000001A15702C000-memory.dmp
        Download