c195a2f51738d78172f8dc8308d44062336831761fbc70d12fb1e3eb305dce05

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/05/2026, 03:59

Target
tmphrr77epj.js
Size 483KB
Sample260523-ej5j1ae171
SHA256 c195a2f51738d78172f8dc8308d44062336831761fbc70d12fb1e3eb305dce05
MD5 3906cbd546dd2cf8b4816605a077d19e
SHA1 47e96ced2c7e621f56d1154e51bb7c3b8419d802
SHA512 dceb46839c8fdf31c930b491dac370f84702a3242949de15ecc99d99b64918363803546a8ffb07ae9239b2f26d1b4bd313d5e266cc7a2baece4fbf33b0d03636
SSDEEP 6144:TQvgSGulaxl4khEfDuDk7Wiagmd4iLAmWR6C2F:EahEfDuDTiagmd4iLAmWR6v
TLSH
T110B4A40EABEB3326C51371799F5F9004A536840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmphrr77epj.js
1⤵
- Badlisted process makes network request
PID:1912

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact