e0c8aaf77a03d2e0c7714c4ea006242ebcb0975aba2da13ddcf84635ecb81596

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/05/2026, 23:34

Target
tmpjs5gb2bq.js
Size 99KB
Sample260525-3kn6eahv7m
SHA256 e0c8aaf77a03d2e0c7714c4ea006242ebcb0975aba2da13ddcf84635ecb81596
MD5 5d9c407dd416f7e1fdbffbbb6cb6d0a1
SHA1 aa9536c56c4decbb507e2f4fe49cdb324c406f9b
SHA512 25f8ae04d9b3e2e7d1cbca50565ed9093c7f8a558b664c5907cca9abfa75515b5f6710489815daabc95d07036dcc8204f37bbf7c429f3196457056c08f453984
SSDEEP 3072:O36fPJptwTmqAz7vcHk2CzlZR4GRricgg54oRuyrrP9pn19e6msCLP/:a6fPJptwqqAzsk2CzlZR4GRricgg54o6
TLSH
T120A376883FC6F07193657433692FA0EEF27E0C91760C8196DAA760D4BE5CB18E2B595C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	1688	wscript.exe
75	1688	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpjs5gb2bq.js
1⤵
- Badlisted process makes network request
PID:1688

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact