1790413cbee69c1137c475c9fd7c5e4d49fe1cdfbe3c537f0f2a7f68b119f1ff

Resubmissions

04/06/2026, 17:14

260604-vryz7abz2m8

04/06/2026, 17:13

260604-vrml6aby9q8

Analysis

max time kernel
6s
max time network
6s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
daron_document2.js
Size 682KB
Sample260604-vrml6aby9q
SHA256 1790413cbee69c1137c475c9fd7c5e4d49fe1cdfbe3c537f0f2a7f68b119f1ff
MD5 f94ffc47c368ab0303c9147a7df30faf
SHA1 526f5be01d6bf82b3a9513c941d766bbd45e11e1
SHA512 df32509b82e0a62f3915a04db0cbb8c23ed65e02c5289b1f5c6e6150a1a2622bb3a8a95e4b56c8d1f7c1110a39546cf1fcec49ec57d82b24c8ed7da2727450d5
SSDEEP 3072:Z7FFTJ1VS4mzHvwzN4hYSUH0mjqv1L1cjl75u1A6Cv3BBrleAcw3AhOGxK5Htkk:BFFT3SpYWalYeJ3XQhg5HtJ
TLSH
T171E4FF6628BB5000820762EA573B63F97577C983BA1474B8F84FF17CEF8AC1C5660679
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
1	3128	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\daron_document2.js
1⤵
- Badlisted process makes network request
PID:3128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads