dcadd8fb98e8772563318434c6cbb8b4c25a57af6809e099d9cf5ce11051bd7b

Analysis

max time kernel
298s
max time network
302s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 09:20

Target
Vymoga_VR_Registry_Audit_Forma_3_Signed_17_07_2026.js
Size 5KB
Sample260718-la19jsas8y
SHA256 dcadd8fb98e8772563318434c6cbb8b4c25a57af6809e099d9cf5ce11051bd7b
MD5 09aaf2a4dd2d85d27cdcaf18039be5b7
SHA1 240302d3dfc03988be1a72c7792be7de6312bb75
SHA512 8d4879ebe84593ff1f35d9f55d980e76ba7fa5084514b89fb12ca1d1999325ae1649f45d8489859412480da2308291a60a016b51228713b5d81aa4e0b9460a37
SSDEEP 96:wJuJrI585yofc4Cpw9CwwBX8a6adaf2BKUyoBYV8jp6XCDj/uIfiomOMqk4aPJ:wJuJrRBCp+fwBMa6adauBKKB5tsCDj/S
TLSH
T1A7C18707531AC3D30BE410E3902FD68B59EB9F73BD98C0498B06AECBD58D5D69168F09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
3	4148	wscript.exe
4	4148	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Vymoga_VR_Registry_Audit_Forma_3_Signed_17_07_2026.js
1⤵
- Badlisted process makes network request
PID:4148

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact