d5f002f72d7727b2f4f862f7c1c110c40e83fb6d955b57d538b2a9c792f3db43

Analysis

max time kernel
149s
max time network
128s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 03:56

Target
tmp8e2qiaqn.js
Size 483KB
Sample260523-ehdd5ae14x
SHA256 d5f002f72d7727b2f4f862f7c1c110c40e83fb6d955b57d538b2a9c792f3db43
MD5 9fed4cdbb7eb659411081b724af1d526
SHA1 5fc431d3a90e8356a4ca2f0b04ff5eaab21f58b2
SHA512 63717d2fa15c30cb1fcc927ab526b1e2e552bf50024c5b6560ff8391b79c7bbe12e01c0abb230f4d6427474557a2628b2cdd1078c8ac983c96637cdec4554118
SSDEEP 6144:GQZmSuulaxl4khEfD3xA7Wiagmd4iLAmW46jSF:XChEfD3xviagmd4iLAmW46w
TLSH
T135B4A40EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	4456	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmp8e2qiaqn.js
1⤵
- Badlisted process makes network request
PID:4456

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact