3288f59cd16d9f02e514fa270e30a16cc2fb827053c027f1a33bb2f7a2e1eb1c

Analysis

max time kernel
298s
max time network
292s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 16:24

Target
PO-MAS-1165J-26R - DonadonSDD S.r.l.js
Size 43KB
Sample260511-twv9esev7y
SHA256 3288f59cd16d9f02e514fa270e30a16cc2fb827053c027f1a33bb2f7a2e1eb1c
MD5 c1abb4ca91a144933b2eff36b440f004
SHA1 fbcc5fdeb15ed06de60e528e2c78dfd91acc0887
SHA512 118f432cfbb8154f8801b86ced6694c5fbf20327bcd4a6d1cb4e0e7399349eee08c0b3786c730b3f8006321112d90c7b35019e88664474583a3a09467a5a5db0
SSDEEP 768:DIvOEmFYDz8+rw65h3ETBccTKq1eYFOy0sVtLPDec4PQ71y:DRYxrw673EVccTKq1FFOy0sVtLCcTc
TLSH
T1941374CCB6C6F5508341B0A71D2AA09EF6AE9DC0614A50E0FD88B85C7CB8B19D775F78
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 6 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\PO-MAS-1165J-26R - DonadonSDD S.r.l.js"
1⤵
- Badlisted process makes network request
PID:656

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact