f397f1cf019474d0c3035ed8ebc441c371939b206566935525ed6fc8fc73df34

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/06/2026, 04:14

Target
Voidware Larp Roblox/Larp larp sahur/auth-spoof.js
Size 10KB
Sample260623-etm3psas2k
SHA256 f397f1cf019474d0c3035ed8ebc441c371939b206566935525ed6fc8fc73df34
MD5 8bfa3762de562b05b7dc3ccc3a910012
SHA1 dfec8befa6112bebcff81fa2ec77b9f1771840a3
SHA512 1922dd2fed5812cea5d8cd41421e28ba501ae08d74571008beb8a082689b10201c36bd68015949e1a8f9922825781a9ac31530640462dff2c0a7c3d77220b152
SSDEEP 192:7oMUOA4WLfyCMrdmkmZg3973Pz35QQ4KanwShea8koJ3+oxO3Q7/DGxE6YGU3:7MMrdmUVrJQvjHA3+VQ7OE6y3
TLSH
T15322004EBCE77052862370788BEF940876B5E517115ACEA0BD8C91603F94479D3B0FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

Network Service Discovery

pid	Process
2960	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Voidware Larp Roblox\Larp larp sahur\auth-spoof.js"
1⤵
- Network Service Discovery
PID:2960

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact