49ef1aed44ed587320da657ea08d5dc541e9af50cdf447f426d0e36af72dcf8e

Analysis

max time kernel
149s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 01:01

Target
tmptdefwklg.js
Size 26KB
Sample260523-bc9ctsct3x
SHA256 49ef1aed44ed587320da657ea08d5dc541e9af50cdf447f426d0e36af72dcf8e
MD5 73d42dfb7b3ed90ba122f671635d9ee6
SHA1 c73f86c2161466e62c8759c2e4a658561feeb091
SHA512 e3ed6d59d59e05c4c3cbbabc967f6db3fd4b03d3413ea2e9c165a55f9fba46035ffeb70ff319eca6498239fb117d1f614c3a01d0a5dc581279fbf6c14ffe4e70
SSDEEP 768:NdL1uxh3TqwbWPMF7hqs+R65SIR5FgBpVMqnSa:huxh3TbOc7hq3AkQOVTSa
TLSH
T12BC2EBC93EC6B1A6037154332D5BA556F26ECC89BC8CC4A9EAA55094FD64704CCB3AFC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmptdefwklg.js
1⤵
- Badlisted process makes network request
PID:3484

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact