36ce4f088af7093e08e778bfab6856e56be56ab29415c9bfbefa7d0b22decb89

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 12:28

Target
GLO SPECIAL MID-MONTH PROMO.js
Size 18KB
Sample260721-pnlmsstvdx
SHA256 36ce4f088af7093e08e778bfab6856e56be56ab29415c9bfbefa7d0b22decb89
MD5 10a8f5e8462e4db1b6d21cadbfe9487f
SHA1 d5e0b2f03666b24b31296076ef49a20be66e7f43
SHA512 714eee0a6eee229d99e546e86990a914704ffcbd11776e573d7c993e50f9b317328ce86662e6b7fc890b9366d976f10a25f4e4d3aaa9e1843c65607b9311558f
SSDEEP 384:ObvRV7zVV/6ZMrHy/blJ6DrKa1hpoA1ijSvMGmO80doX8BvuRZMCqftrivN4Kvll:OzzSZeuoy9wWma8QKNmmi
TLSH
T16F822D3DC21B0E27C4314E18BEBE3E586D76CA6B0D4CEA36D6EA75A45C3D461274223C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
5	996	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\GLO SPECIAL MID-MONTH PROMO.js"
1⤵
- Badlisted process makes network request
PID:996

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact