bb8d3ebe284268ecd4e9d8562e91eff42a37f6edbeaecf18f45c554ab2a4239c

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 13:36

Target
u40_vihCaOzU6dhWLpHv9Co39u2_rs8Y9FxVSrKkI5w.js
Size 102KB
Sample260727-qv9tmstdlf
SHA256 bb8d3ebe284268ecd4e9d8562e91eff42a37f6edbeaecf18f45c554ab2a4239c
MD5 432526c68c22c66ea2fccb2a0721b3d1
SHA1 3d8e9e1bc1639c7626a13e52ca820eb453b3d233
SHA512 8eb26368595cf969536c950f0a55df558b3c79306e81097be2eae57cd6ab207663cb8ae1ff59af254ca3aadfaa725b22104932296d443cc649bda3f7541a22a3
SSDEEP 768:fgR4zSZqBC2t53XwfXKDJQgAG6pZxwucnJkZyhedOFZErXNbEMLiOxQPK4IfTLVo:pvDFiTumsMQu/E2eOVRcH
TLSH
T1B8A3CA414996748053362BBFB32A98E5E3B60B6B02845A1BF83C7444EFF1D09DEE5CB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\u40_vihCaOzU6dhWLpHv9Co39u2_rs8Y9FxVSrKkI5w.js
1⤵
- Badlisted process makes network request
PID:4936

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact