642e697b72666b5fc9916b1839794030c171ebd54a8682eed3c71c339ba4ac6a

Analysis

max time kernel
40s
max time network
36s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 11:15

Target
SCAN20DOCUMENT20260406720ZJ-MZL20108..js
Size 44KB
Sample260623-nclyract7z
SHA256 642e697b72666b5fc9916b1839794030c171ebd54a8682eed3c71c339ba4ac6a
MD5 537ddf207523e2e06fdea30a7cb69f6e
SHA1 288376a2edc58579033cea57b6b1a0253220ae7a
SHA512 d18ee0af0577d4d18a1517173a7504ff55ee37dc79b1751e1726d0b052a505b8645e8b8d44dc703ae2079e1a1510055c4534323f38edecf8853a43d10a9e4352
SSDEEP 768:WCOANmsHA11dVUUdHxWtFIOfQiTiHMo67agDenzVnAT9ehx+Ri:Z7HC9dHEYOC7seBug+I
TLSH
T16423B68E36C5B0664357B0B73D77F192E2AD9D81728C8505FAA9F49CFCB4218D225B38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 6 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\SCAN20DOCUMENT20260406720ZJ-MZL20108..js
1⤵
- Badlisted process makes network request
PID:2924

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact