f8a444ef623dce3be44ddaf18cd1d892cf2dc02ab3dacf6db581e58842778160

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/06/2026, 16:48

Target
tmpjs_w6fut.js
Size 483KB
Sample260602-vbmbfsay9t
SHA256 f8a444ef623dce3be44ddaf18cd1d892cf2dc02ab3dacf6db581e58842778160
MD5 f40a099012b88b19f5475cb6057ac16a
SHA1 622cd78c89e2a39eb2779abb5caf37bc257a8880
SHA512 1e61932a0df7477667c0405c364478f7b44ebd66209e72eda57f2274c3e07905700b877b67b739e1d1a9eb9d6b08fc2c821bd063a4a41a4ed311e4bec70534a8
SSDEEP 6144:s1QitLTulaxl4JhEfDkFA7niagmd4iLAmWR6vSF:sfkhEfDkFaiagmd4iLAmWR6s
TLSH
T1C0B4A50EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpjs_w6fut.js
1⤵
- Badlisted process makes network request
PID:3760

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact