a8c581f2bffa2df03a2ec133b2c6b9d56dc4298bac141204c7f47bef0d26add2

Analysis

max time kernel
149s
max time network
99s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 17:18

Target
CATOLOG SLIDE PRESENTATION.PPTX.js
Size 43KB
Sample260528-vvmrbsht2s
SHA256 a8c581f2bffa2df03a2ec133b2c6b9d56dc4298bac141204c7f47bef0d26add2
MD5 51dee784a5b432c4f2997be559d371f8
SHA1 9f1718cc3a78bc71534298ad37292a2cf0357582
SHA512 e386e6ef5ece95e4ce0ac99de549f1c7c43924e0f4d744fa5a8b14025276914f2fc1e53e41729934e1c32723f31a5dae8b9cc3eaa774f20863e68ea9145d2b92
SSDEEP 768:6FWAG1re53VflKNYIpMO4X+cg04EC0skqAtTc+MKjLMy3LCDCX4DrHNdH1IAvi6k:i+leAmWZqQVIVGTan
TLSH
T196139204B7C07EC1228716F7B32BF0E1E65A05EE7E450887F152FD9574BA61AEAE2530
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
1	924	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\CATOLOG SLIDE PRESENTATION.PPTX.js"
1⤵
- Badlisted process makes network request
PID:924

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact