12dfe3c21696bd6767fc43dbe4bed6291ac09409597d9e47ec665519c9c5f519

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/06/2026, 12:26

Target
tmp_jk332q3.js
Size 35KB
Sample260602-pl8pjsds3v
SHA256 12dfe3c21696bd6767fc43dbe4bed6291ac09409597d9e47ec665519c9c5f519
MD5 48b75c191c8ab7a18c24db30efcb62f3
SHA1 492139bd9d2ea84c0af960a876ed7b12f62f8335
SHA512 508571497163245e757ac6cac193a22b911b37f01f7103d69fb837e1a8ba33a2eee7517061b0e1ed1ccc75eed404a547ed2865e5e2ceb433cb3886d16544fcdc
SSDEEP 768:eB62ZJgG5HOs5DUM/lSz8gJ7T/jKN1YxMInOJ8aIFZ2n:eQpG5HOs5gRzXJ7TbKWMRJ8aIf2n
TLSH
T129F261C83BC7B5A21E4230FB382B7052F53E8D80650D4454F6E891BDB968769D5BEB38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 7 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmp_jk332q3.js
1⤵
- Badlisted process makes network request
PID:1864

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact