3288f59cd16d9f02e514fa270e30a16cc2fb827053c027f1a33bb2f7a2e1eb1c

Analysis

max time kernel
298s
max time network
248s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PO-MAS-1165J-26R - DonadonSDD S.r.l.js
Size 43KB
Sample260511-twv9esev7y
SHA256 3288f59cd16d9f02e514fa270e30a16cc2fb827053c027f1a33bb2f7a2e1eb1c
MD5 c1abb4ca91a144933b2eff36b440f004
SHA1 fbcc5fdeb15ed06de60e528e2c78dfd91acc0887
SHA512 118f432cfbb8154f8801b86ced6694c5fbf20327bcd4a6d1cb4e0e7399349eee08c0b3786c730b3f8006321112d90c7b35019e88664474583a3a09467a5a5db0
SSDEEP 768:DIvOEmFYDz8+rw65h3ETBccTKq1eYFOy0sVtLPDec4PQ71y:DRYxrw673EVccTKq1FFOy0sVtLCcTc
TLSH
T1941374CCB6C6F5508341B0A71D2AA09EF6AE9DC0614A50E0FD88B85C7CB8B19D775F78
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	4696	wscript.exe
6	4696	wscript.exe
8	4696	wscript.exe
10	4696	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\PO-MAS-1165J-26R - DonadonSDD S.r.l.js"
1⤵
- Badlisted process makes network request
PID:4696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4696-8-0x000001B675D40000-0x000001B675DE9000-memory.dmp

Download

memory/4696-9-0x000001B675DF0000-0x000001B675DFC000-memory.dmp