14b61927bd8eed6147ae8264e79c47bbf3e9d7c25d87ed410651e1911993fac0

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/06/2026, 15:03

Target
tmpp5nmbdrt.js
Size 483KB
Sample260609-sfd5jads9k
SHA256 14b61927bd8eed6147ae8264e79c47bbf3e9d7c25d87ed410651e1911993fac0
MD5 2d43c391a1eac0b35e7ff274a6e14626
SHA1 21a32738ad12b86790070fa22af0ca968297fc51
SHA512 743e5239c5ac1a43e6aae138330894a28146a9c49a143975856a73d752d87e5eae49bd1df4914083d924f30d9bd3caded7efedcf172451631d16070d886b2d54
SSDEEP 6144:FQHXlfx3ulaxl4khEfD9FL7ziagmd4iLAmWR6LS3:o1hEfD9Fziagmd4iLAmWR6e
TLSH
T17AB4A40EABEB3326C51371799F5F9004A536840B661AEC1D7D4C93880F5863D9ABBFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
100	2576	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmpp5nmbdrt.js
1⤵
- Badlisted process makes network request
PID:2576

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact