bc2c735f3db0ec47df461f832b275fc18f058562cf336670eaff5292a759526f

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 12:28

Target
tmp3ov4_chv.js
Size 39KB
Sample260602-pnpdpaev2p
SHA256 bc2c735f3db0ec47df461f832b275fc18f058562cf336670eaff5292a759526f
MD5 05b2dd8caabb14615616ee53c2516a14
SHA1 953799ecb31a56621c0cd62c7e1012307f1846f6
SHA512 9418f12c91f844ed6ab80d8c69e0e4de96cd481903fcc0ed3dcd69cac9a7592083b931e0e72fd7bf4e53926a2f78bf78eae1663706bd3d73e53ee6561ad60bba
SSDEEP 768:pfJw6sTNYhWccjpoSiH+rFR3J67WeCZXqV14gItfdQUQFL6UM+SsSQiUcEo:Lpqudip4H+hR3J67C0V1+tfajU+SsSGg
TLSH
T1E90375CC3EDBF499821639E31E76D443F5AE4E8071188334FE89A09EBC64715D57AA38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmp3ov4_chv.js
1⤵
- Badlisted process makes network request
PID:4396

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact