a3a0e7bea2365c2ab8349cdf68d1f7b21d039d1f4f9cb1e5da8da89ff2260511

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/06/2026, 15:01

Target
tmpwznx2js3.js
Size 483KB
Sample260609-sdzcpads5k
SHA256 a3a0e7bea2365c2ab8349cdf68d1f7b21d039d1f4f9cb1e5da8da89ff2260511
MD5 37cc5b3e3b1d41b517ed5d3afccde9f3
SHA1 a4122f73a1ac35bf37e5cf445deb623515129969
SHA512 9a015f4683aba4a4712f932083dcb777ae874eba82f2c91ceea4a3d02e37001b3516cfb9fd3fac4db60854ce62ba6867449d51bd2f75736826506ad68379d237
SSDEEP 6144:iQSfSzulaxl4khEfDLxAtWiagmd4iLAmW667SF:xBhEfDLxviagmd4iLAmW66Y
TLSH
T1EBB4A40EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	2224	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpwznx2js3.js
1⤵
- Badlisted process makes network request
PID:2224

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact