c9e702a02d7003afce0ba08d6bf3177b92b16cd11a820f3d00bb3128ade6f65f

Analysis

max time kernel
298s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 06:55

Target
LHDNM 1TAX FORM 151916TAX 2018 - BE1467430.js
Size 88KB
Sample260808-hp5zhascna
SHA256 c9e702a02d7003afce0ba08d6bf3177b92b16cd11a820f3d00bb3128ade6f65f
MD5 09a1af526c6e103e7dadc563927017e5
SHA1 86585a99f514bddb3d998ace15ab0d867b926dfc
SHA512 d22082d23154c43334962a6438f4fd5416601a59438595f176cda21a7ea13a96ec56d23baf2298647f368603d49945cf13a8d98fd606ea12d32a3d236e44956e
SSDEEP 768:kOkUqKsY4NeXpBoU0Bt4+mhHEZzHWwWbEZ5UJ0ege7JObsqS2f+yjipIjUzwun/M:rk7AobFmIgbuFtT5
TLSH
T17293FB055897B4806376B7BFB72B98E4E7A657270240291BB83C6440EFF2D09DDD0DBA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
1	4196	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\LHDNM 1TAX FORM 151916TAX 2018 - BE1467430.js"
1⤵
- Badlisted process makes network request
PID:4196

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact