2c6332b6b48802fdabb516ce53bffc15f532024cb2287de3428b67840303ea3a

Analysis

max time kernel
149s
max time network
137s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 12:19

Target
tmpcjuiak64.js
Size 42KB
Sample260602-phbkmsc12s
SHA256 2c6332b6b48802fdabb516ce53bffc15f532024cb2287de3428b67840303ea3a
MD5 dcb3a082603492ef19ec7cae557f8830
SHA1 05e47f28e678200658a86290d0d8d7a848ba542a
SHA512 429440243b271e26b782466111963ffeada5dcf36040bc6d63649e7cc621167b6c8dd4260906c5baa0e6be14a996b8130de5d8efee3331bbd5fd0ceee7c0753b
SSDEEP 768:8UO2xhgWLh5ofxirtzIQGDzTp5BVdDCRSzaN6RLht1i1455fMPCRyqa9:8vyhggIfqETfBTDCRSzaN6RLht1L51Mn
TLSH
T1D813C5CD36D7B0A54A2134B72D2B7457F62FEC80B24D8365F9D9A0DCB860B19E831678
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 5 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpcjuiak64.js
1⤵
- Badlisted process makes network request
PID:2108

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact