27bbe5eed9b7f5226bc5cc292658c11da8ce5fbbb82f17da1b17fa22199ae1fc

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/06/2026, 12:19

Target
metro_remit_dtd_06232026_076422283_55000php_jpg.js
Size 692KB
Sample260624-phfjlacs2p
SHA256 27bbe5eed9b7f5226bc5cc292658c11da8ce5fbbb82f17da1b17fa22199ae1fc
MD5 44d5c329667982c73915522544f30be0
SHA1 b4f393e8f3e1438d23d0b8296b2a145325708489
SHA512 c7924889540a9db7e39c24bdb9524da9951334e450fe279eb42d27601458c70a0e7cc98b1a6e5e1a1032098a9bb15ee896d857fdbaf292cbc2d7ed9b58326a18
SSDEEP 3072:cYoc+F/smPBeGlG+tR15jSrHNTLvoHrnQdcPJDWuE9aSsp2NsZQT7vnBaWRSFXCY:MWTLvwjhV7geyu
TLSH
T1BFE4E8C44B8ED4035ACC2D43BF9DBBE7512992A3969872839A5DFB8805B74D781ECCC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 23 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\metro_remit_dtd_06232026_076422283_55000php_jpg.js
1⤵
- Badlisted process makes network request
PID:2968

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact