Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 08:36
Static task
static1
Behavioral task
behavioral1
Sample
oNDlXdi.wsf
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
oNDlXdi.wsf
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
General
- Target oNDlXdi.wsf
- Size 8KB
- Sample260709-khymysf19w
- SHA256 8e7e5bc594b01ad318d11e24e4dea742085f59e87cf0d27d64e2f78de3f06715
- MD5 463308a5be42a7f0473eb269837d3950
- SHA1 a3a868ee609f441c776ff225c765667a0b16a45c
- SHA512 7310d804b2af543cba9b7a274caa9b591e2df69ebf4ef65c8c1840350ef096b84292dbeb59011acf1ae7e247f4bc16b848b6aef334871ed63c278c147a9b7f51
- SSDEEP 192:0FO6eebih/HDOyZ+Ri66vgFO6zjebl/HJZVIK0OFk+iJ+b+PFw9xoh2i4:0RbsbON+gAblTvoMp
- TLSH T18902D84522FC49C3A1029C3E11B67C110E3CAA357F7516457AFA282B91BDF22EC74E9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 3 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 2 2184 WScript.exe 3 2184 WScript.exe 4 2184 WScript.exe - Script User-Agent 3 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 2 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) HTTP User-Agent header 3 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) HTTP User-Agent header 4 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)