fde9c98c6e489ce409b098347493d3cc5cbd96d12d7248ee0152ecd2a67e8fed

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/06/2026, 16:50

Target
tmpj3yn3xt7.js
Size 483KB
Sample260602-vcc46saz3x
SHA256 fde9c98c6e489ce409b098347493d3cc5cbd96d12d7248ee0152ecd2a67e8fed
MD5 d0350cb565e1f8e2c6b2064650236f2d
SHA1 531c2b62ecb4f66c5ac5573983cb6c9d2c234ce5
SHA512 60688831097d66156cc9160c22e1977ca2e855bb2aef2e84c42c3a0c6e754aed9ad293cb95ffdb5d0b2d4eccbc8f952b7bc341ad9a2f213b224b0c2e6528d2bf
SSDEEP 6144:sQ/mSNulaxl4khEfDOxA7aiagmd4iLAmW+6duF:DDhEfDOxfiagmd4iLAmW+62
TLSH
T134B4A40EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpj3yn3xt7.js
1⤵
- Badlisted process makes network request
PID:3324

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact