e116b7b31ccddd17b1ed883d7cbeb290dd2da5e822fbed6bf555bf31c0d2a4cb

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/06/2026, 16:48

Target
tmp3jt257cz.js
Size 483KB
Sample260602-vbabwsay7y
SHA256 e116b7b31ccddd17b1ed883d7cbeb290dd2da5e822fbed6bf555bf31c0d2a4cb
MD5 d5cc3b51213e96e79430b473e4a6c1b7
SHA1 82fbcdf0f91e6af506fbb1c0d83ae11133f6b0f7
SHA512 cc0e7df455950a663881503189b57b7244fe4c540bd9565c30edaa48959ef4ee4ad294536057efa2d7acb1eaa279a3c83c5eab9180fbe385eb02d1ad0d14eb53
SSDEEP 6144:HQXifSXulaxl49hEfD3XA7riagmdNiLAmWR62HF:quhEfD3XWiagmdNiLAmWR6e
TLSH
T103B4A40EABEB3326C51371799F5F9004A536840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmp3jt257cz.js
1⤵
- Badlisted process makes network request
PID:1612

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact