b0fc681c060b77fdc4c72609b803874690be98511616fa0175d3bedfdc913ccb

Analysis

max time kernel
149s
max time network
147s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
09/06/2026, 14:58

Target
tmpdze0awmm.js
Size 483KB
Sample260609-sb9qmsc19j
SHA256 b0fc681c060b77fdc4c72609b803874690be98511616fa0175d3bedfdc913ccb
MD5 dec0aa6a1dd7c71b05b8113573ced35f
SHA1 7d79446c30833187670e5262c330beb5b36159e8
SHA512 adbe75030781ba128747041e869be91ad830dddf158c944a80fa407cb9323318a91c68a6cee10398f6b5dae26128956603c8c06cc7fc477295a5058fd29b879e
SSDEEP 6144:EQbRSpulaxl4PhEfDKxA9Wiagmd4iLAmWR6JSF:KohEfDKxZiagmd4iLAmWR6W
TLSH
T1B8B4B40EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
29	4420	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpdze0awmm.js
1⤵
- Badlisted process makes network request
PID:4420

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact