6ba2db461aeeb228074c678dbf0d249ce66e05aacfa76bd8a0eedfbd4dec33e5

Analysis

max time kernel
150s
max time network
148s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 23:59

Target
tmpis7o2gd9.js
Size 34KB
Sample260522-3154vsbt2w
SHA256 6ba2db461aeeb228074c678dbf0d249ce66e05aacfa76bd8a0eedfbd4dec33e5
MD5 ee8db5b400cd8b45ca656460dca7de59
SHA1 7cc5a5bba552af366021df1b1c6a1b4ee9d8530a
SHA512 7d4caed3dca0bd1ec0f5719619fdfd280446198065bf5e6bd3d94ad9d64bea341c2abf74be73b306ec4f6dd6690ab9ca7057151d5db0e7d715642515594d03f2
SSDEEP 768:EVx36snO7Oo2e4CvdWjJXhscC2buL3wJWoo/vsaFya3ICUzmNj5+:jYA0nKaRK3wY/vsaF5ICmuE
TLSH
T1B1F2B49B75C6B051464730F72B27E51EB16E8C84790C8420FAD4B89DBC2DF2CD6BA9B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpis7o2gd9.js
1⤵
- Badlisted process makes network request
PID:1004

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact