d68ac694a15be967bbef5bf8f00d800c2ee322c318f3adc2673b4c7975ae9d44

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 14:09

Target
mal.js
Size 38KB
Sample260729-rgexsaxwex
SHA256 d68ac694a15be967bbef5bf8f00d800c2ee322c318f3adc2673b4c7975ae9d44
MD5 fd39f0c30fc6e37d5433e4f4ea767c18
SHA1 de327a6a16d94aa0fb1a274cdbfb1ace15aa814c
SHA512 d9df780859b754b0003379fed27bf0ca062bd19da0bc2aa3112eaa7116b3d6fa7c186b2e197cd30e7fa8462a58da956a97ff961ebe4f2ebc149cd902de3ad238
SSDEEP 768:U+Qqf6YdsoK1MJr2gVo1/51lYuqKvOgRuCbQruNqiN8aMvyT6:U+JfTdVJ2JVfqxobQruvUvym
TLSH
T12B03938D3BC9F0E04612F87B3E2BB1AFF26E0C84B64C8454F766B154F9B4308D955A69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 6 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\mal.js
1⤵
- Badlisted process makes network request
PID:1744

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact