8420646855ba565ff282cccff94b8f1213bd2f508d44bcd423e07b3d56f995d5

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 22:15

Target
Trxn_Ref_000000000000000045782100zh_pdf.js
Size 759KB
Sample260723-158dnswvgx
SHA256 8420646855ba565ff282cccff94b8f1213bd2f508d44bcd423e07b3d56f995d5
MD5 8693de8feb6db936c9ee3f5588d600cf
SHA1 850188fa212aedd7193e6ca175eded9b4a7cf5bb
SHA512 5f7d29ae8f810ba229a3bb0d1b4d2d0d82e44205adc1cfe4a9e5bd2746dde917628f92a77712376424785d275576c7d0ecfb565ac376c060d0ce23c7e80ad149
SSDEEP 3072:I2yJLQjgtwQPYCPO5haiKR3Ms8ihO8i2LoQurUNqUekFpE5WIETBMy0zrZVR+ckW:INpt3K5WILr073RszbH
TLSH
T1D5F4F8C44B8ED4035ACC2D43BF9DBBE7112992A396987283AA5DFB4805B74D781ECCD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 8 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Trxn_Ref_000000000000000045782100zh_pdf.js
1⤵
- Badlisted process makes network request
PID:3808

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact