ef4d3288ac79af7a513a61abab46d8f0f6272d0a20343739bc3d1aa74edade23 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

.cms/admin...tml.js

windows10-2004-x64

3

.cms/admin...tml.js

windows11-ltsc_2024-x64

3

.cms/img/favicon.svg

windows10-2004-x64

3

.cms/img/favicon.svg

windows11-ltsc_2024-x64

4

.cms/img/i...lt.svg

windows10-2004-x64

3

.cms/img/i...lt.svg

windows11-ltsc_2024-x64

4

.cms/img/icon.doc.svg

windows10-2004-x64

3

.cms/img/icon.doc.svg

windows11-ltsc_2024-x64

4

.cms/img/i...cx.svg

windows10-2004-x64

3

.cms/img/i...cx.svg

windows11-ltsc_2024-x64

4

.cms/img/icon.exe.svg

windows10-2004-x64

3

.cms/img/icon.exe.svg

windows11-ltsc_2024-x64

4

.cms/img/i...ac.svg

windows10-2004-x64

3

.cms/img/i...ac.svg

windows11-ltsc_2024-x64

3

.cms/img/icon.m4a.svg

windows10-2004-x64

3

.cms/img/icon.m4a.svg

windows11-ltsc_2024-x64

4

.cms/img/icon.mkv.svg

windows10-2004-x64

3

.cms/img/icon.mkv.svg

windows11-ltsc_2024-x64

4

.cms/img/icon.mp3.svg

windows10-2004-x64

3

.cms/img/icon.mp3.svg

windows11-ltsc_2024-x64

3

.cms/img/icon.mp4.svg

windows10-2004-x64

3

.cms/img/icon.mp4.svg

windows11-ltsc_2024-x64

4

.cms/img/icon.ogg.svg

windows10-2004-x64

3

.cms/img/icon.ogg.svg

windows11-ltsc_2024-x64

4

.cms/img/icon.pdf.svg

windows10-2004-x64

3

.cms/img/icon.pdf.svg

windows11-ltsc_2024-x64

3

.cms/img/icon.rar.svg

windows10-2004-x64

3

.cms/img/icon.rar.svg

windows11-ltsc_2024-x64

4

.cms/img/i...bm.svg

windows10-2004-x64

3

.cms/img/i...bm.svg

windows11-ltsc_2024-x64

4

.cms/img/icon.xls.svg

windows10-2004-x64

3

.cms/img/icon.xls.svg

windows11-ltsc_2024-x64

4

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 17:06

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

.cms/admin.cms/html.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

.cms/admin.cms/html.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

.cms/img/favicon.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

.cms/img/favicon.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral5

Sample

.cms/img/icon.default.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral6

Sample

.cms/img/icon.default.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral7

Sample

.cms/img/icon.doc.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

.cms/img/icon.doc.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

.cms/img/icon.docx.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

.cms/img/icon.docx.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral11

Sample

.cms/img/icon.exe.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

.cms/img/icon.exe.svg

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

.cms/img/icon.flac.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

.cms/img/icon.flac.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

.cms/img/icon.m4a.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

.cms/img/icon.m4a.svg

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral17

Sample

.cms/img/icon.mkv.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

.cms/img/icon.mkv.svg

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

.cms/img/icon.mp3.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

.cms/img/icon.mp3.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

.cms/img/icon.mp4.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

.cms/img/icon.mp4.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

.cms/img/icon.ogg.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral24

Sample

.cms/img/icon.ogg.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral25

Sample

.cms/img/icon.pdf.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral26

Sample

.cms/img/icon.pdf.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

.cms/img/icon.rar.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral28

Sample

.cms/img/icon.rar.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral29

Sample

.cms/img/icon.webm.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral30

Sample

.cms/img/icon.webm.svg

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

.cms/img/icon.xls.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral32

Sample

.cms/img/icon.xls.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Report Analysis Logs

General

Target
.cms/admin.cms/html.js
Size 17KB
Sample260720-vmwn9say2w
SHA256 ef4d3288ac79af7a513a61abab46d8f0f6272d0a20343739bc3d1aa74edade23
MD5 a174ae4a3dd0341c9c39fd94a39731a7
SHA1 582d50f2a0f2e9e2f0f30927c8128e4552c0ff38
SHA512 a4c4a82db55f4e79459d394962cea5eb9078133a1a0c29237a576a21df3db66d6b208fb30d61df6d2dc6d871bd645cd32b972b39b50eaf1dcedbb15ca927729a
SSDEEP 192:I6tvy090B0J0j0Ac0Z04fayqe0S0q0709j+cQr0GJQK/I7Y+Zx/DFZyWNzOJ3JRk:OZuJxh0/BGXSzepMSCXy8U83uw8lqN8O
TLSH
T11182422A24FA59360017BCB21F8A21443C1682975509D80C7EBE67E80F89D5E8DFBFD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\.cms\admin.cms\html.js
1⤵
PID:3688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy