400f9c3116268f6b5ae75d4251cc05aac3617c4387b6ab3da3872e359fdff8f0

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 09:10

Target
SC-816720-PDF1.js
Size 103KB
Sample260804-k5cn1agf64
SHA256 400f9c3116268f6b5ae75d4251cc05aac3617c4387b6ab3da3872e359fdff8f0
MD5 478f34f3c22130e46377c3331be3c42d
SHA1 8f4200cc44eae71af3257cfc6447a11f9f0739d3
SHA512 5205d9e2043090cb1a5f425562fe7b3e66ef4c56aaabc85d9ce911061f810296fd420e9eb4968770abece0757c993ba779e0add5a4f6c1ad61695a39c3e2dea0
SSDEEP 1536:G5WylA7ddO7Jm4tOJaCDOD9V0ytRfbOFXbAQPMQjHtGAEua9mV3wz:CfaCJmhD0V7o/PM2Z+mpwz
TLSH
T15CA3FB9119977080633A6BAFE27B98D5E3B64B6F0180296BB83C7840DFF1909DDE0D75
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 5 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\SC-816720-PDF1.js
1⤵
- Badlisted process makes network request
PID:5164

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact