02a9b7583ce96a778c435085dc7c0f487184f2e2c43f3545bd98ec47dc743629

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cron/sync_smsman.js
Size 3KB
Sample260508-phra4act2k
SHA256 02a9b7583ce96a778c435085dc7c0f487184f2e2c43f3545bd98ec47dc743629
MD5 a2f111a2c64e28818c3fa61abaf976f6
SHA1 d454c7e290f85ec2d814af0e5fc021b32c3d978a
SHA512 3440ac4c6f7bbed3a8a736cf38c106b6a29cb8d622d6bc1353ef45e23c79fbf98ac23b8fba7c1576827dc84fddf3b1ed90d068031b12deece5ec20621f4851b8
TLSH
T1EA7193622253DB66C9B35DF97F536058EF0D90130450E6303DBE82900FB54CFE52CA9A
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\cron\sync_smsman.js
1⤵
PID:2608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2608-1-0x000001E958170000-0x000001E95817C000-memory.dmp

Download

memory/2608-0-0x000001E956780000-0x000001E95689E000-memory.dmp

Download

memory/2608-5-0x000001E958170000-0x000001E95817C000-memory.dmp

Download

memory/2608-4-0x000001E956780000-0x000001E95689E000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads