a5801444e08dfbc5f87a565fa426cf4eb0436c23ade2f0fcd768264a75311964

Analysis

max time kernel
299s
max time network
17s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 02:52

Target
SecureDocument138246650.wsf
Size 78KB
Sample260705-dctngsgx91
SHA256 a5801444e08dfbc5f87a565fa426cf4eb0436c23ade2f0fcd768264a75311964
MD5 3aab5406ebf01c9171b8834471872b20
SHA1 b5505fab44a8615cc6752c6ac528e6461ab5a572
SHA512 527c93df65da62d01c1388598400fbd21ac6ee74d4a083cc4fee2ec8fe8ede507c295c9192f8e1bf02ad50c39dc9138d2c24892ac6bdbebb9ae50247e5a5dcff
SSDEEP 1536:zAxXwq7HcgEJuBhxlujlW2WF1CEUbPWqvYA+hf/1K+i2aac/P:zACqIbABN71CFPWmKhfo+Ts
TLSH
T1A97308DB70591A2A2F0FA84B0AD4AB98EF8313F1407D53DBBA1475F0710D61B1CD9BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
1	3440	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SecureDocument138246650.wsf"
1⤵
- Badlisted process makes network request
PID:3440