Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/06/2026, 12:17
Static task
static1
Behavioral task
behavioral1
Sample
Docpac.js
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Docpac.js
Resource
win11ltsc2024-20260617-en
4 signatures
150 seconds
General
- Target Docpac.js
- Size 55KB
- Sample260620-pf3lcaey2r
- SHA256 ce9f660b219488df94d6e0579478d0b210310427b5e2498ff7d0c3e8eb44df75
- MD5 3a701d26e038cfe18deccf820b0041cc
- SHA1 94e69738b6f30230a9bac0ef8425840b8018b9d5
- SHA512 d9d9c8171a5a712e4aae5679433a88d62e0f8a543426a0f6ddc814a8598d99616d914ff96781de6c79687c989bebdedceacbdf38dc9dea5b679c6fec2b974573
- SSDEEP 384:VXjXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyXyM:wgo
- TLSH T12B43F468678F54899375B63FC50BBE1CFC2515BD22AA4121764CACB43FF04848BB9CAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 4 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 2 3932 wscript.exe 3 3932 wscript.exe 4 3932 wscript.exe 5 3932 wscript.exe - Command and Scripting Interpreter: JavaScript 1 TTPs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ wscript.exe