Analysis
- max time kernel
298s - max time network
279s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 09:14
Static task
static1
Behavioral task
behavioral1
Sample
HBL, PL Dan INV. pdf.js
Resource
win10v2004-20260130-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
HBL, PL Dan INV. pdf.js
Resource
win11-20260130-en
2 signatures
300 seconds
General
- Target HBL, PL Dan INV. pdf.js
- Size 52KB
- Sample260511-k7vbtsht8m
- SHA256 a1c1a27baca651c0a3f4d804eca3b261d8e74fa45782c0b5e734befec00ec841
- MD5 1d0f824c965a7eb0a018900641d1b545
- SHA1 a19dd11637a3bcbe56c94848ef49571463c8789b
- SHA512 803e1b9e9b7b4ad74d60cb789007a87c8a3afc8ac993fa3092beba76796dd6ada6c1d7122cb6b9dd541c57146462fe792583abddb6fb577b7333bc90450e4d22
- SSDEEP 768:CO7DwIO/G2OiwW2nXiQ7F8Est7lLIKPID4qnDxWD6f0QK+HbpldGcfwVa+K:CO7DwTdXwWM/7CEs9tnTw66f5tHbpZAK
- TLSH T13433A6EA7B97B0B6069170E72D2FF566E66E4DC0314C8050E9CA70ECF475B16903AD3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 7 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 2 2888 wscript.exe 3 2888 wscript.exe 4 2888 wscript.exe 5 2888 wscript.exe 6 2888 wscript.exe 7 2888 wscript.exe 8 2888 wscript.exe - Command and Scripting Interpreter: JavaScript 1 TTPs