94188a650755ca5f48b6f8d0697a29ebed882793bd8ea5dc1943286a561eef7f

Analysis

max time kernel
149s
max time network
147s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 03:50

Target
tmpa05m8we6.js
Size 291KB
Sample260523-eeattsct5q
SHA256 94188a650755ca5f48b6f8d0697a29ebed882793bd8ea5dc1943286a561eef7f
MD5 0279503d9ae615fb31f707d427ed9fb7
SHA1 b0a8fd1208580e0c960d576bf02469845058d9a1
SHA512 98e8800965a866b01f75aa86e51f2d287d74194283290114ee29c6b07bab738f67209c7eddb0cee092e4ac85f43d19675ce14b68b17277a4b878ccb885f06f09
SSDEEP 6144:ptLfh6nicf8Z5wPTdpR4mDtU1EsnFyRguh3NOxPnS8kVLjIVfzcAKWk1PC:pIl4mDCTFyckgVfoAKBZC
TLSH
T11054A5D8F78D112E4232316AED2F52CDBB7CD1B1561058AABD4D497C24A083D42FAF7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpa05m8we6.js
1⤵
- Badlisted process makes network request
PID:3172

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact