25bbf8c8a8524989616ee9e8cc5733ac32237aeb63638a41af815ca1d05945a3

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 11:49

Target
mal.js
Size 72KB
Sample260731-nzah8sfl21
SHA256 25bbf8c8a8524989616ee9e8cc5733ac32237aeb63638a41af815ca1d05945a3
MD5 81681e836eb34f445a3d8c9149aa35bf
SHA1 d3cadd13bce788e5e42a5ac4c4e7a8d596832acb
SHA512 4e30d01aa02c9b59bfc21b3bf1c22457f377989fbad605cfb0f2d91de11f3efe2ee8c49fb016f42b31443866ceb68b51cb119a2e31a1c6e26154109a3c11aeb6
SSDEEP 768:5JzY2qbkJm8SWRCgQfM5/RGx2h1F3caKce+2HO9Zf2xTzdt/rWNsGWKLISc45RJ5:2aIScAR1h8VNqNbA5bMdJSszDnva3G
TLSH
T13473FD4449867480633767BFA72BA8E1E376472B0291592BB83CB840EFF2D19CDE4D75
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\mal.js
1⤵
- Badlisted process makes network request
PID:3940

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact