d7ff9516afacfc97ba78345b1e941717a20212a83a6a26e4e5c99223f7273eef

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 08:12

Target
BonificoSct_24_07_2026_09_07_09.js
Size 118KB
Sample260727-j4c3psyemf
SHA256 d7ff9516afacfc97ba78345b1e941717a20212a83a6a26e4e5c99223f7273eef
MD5 29a6c5cea7db93692c70ad0a944115a7
SHA1 8a87764a42b2d2ae41ea20d5c26db8a68437f5e6
SHA512 7d83897a4375886da4c07080469d28405cb492011740a86170c5a5069244cf5118e0a8a9a037affed1c222620c6268d1dc202773707cc6dbdbcce88cfd491d65
SSDEEP 1536:ktfbujUiPyf0fD2KBrMEboA/9P9bQ9/XxWjyMbZN2A4jy:ktfbUk8bhp//9P9bQ9vxWjyQGdG
TLSH
T1E4C3CA95598770846376A77FA32AA8E0E3761B3B02801907B83C7454EFF2D19DEE0DB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\BonificoSct_24_07_2026_09_07_09.js
1⤵
- Badlisted process makes network request
PID:4156

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact