787ad7e890615bf6f1316ca60fed870487cb77cf5bf9c8bf88fae6d21e335bc2

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 05:48

Target
RFP-000000143579.js
Size 71KB
Sample260812-ghlrlsaf83
SHA256 787ad7e890615bf6f1316ca60fed870487cb77cf5bf9c8bf88fae6d21e335bc2
MD5 a6974f12446e18e6ab691e60197531bc
SHA1 9a0b2b88abea998e45e635d50c1ba40b07c06f35
SHA512 d4118968dafc3cc169ad8f3616bf1e713a3f01949979b2cad183fdf8e25856af70ffa8e54284df733d83fa829c14feb36ba2c64e6356667b961e57c244f4d249
SSDEEP 768:PTfX4rHPv9PXeafhvsosnjUTx1PY9t25qft8B26VanhOo/C58j+2Bvv9JEGyj+B2:bf+0uLV27mvCDdVapXRvqo
TLSH
T1DA730C4448C376802337A77FB63AA8D8F736476B01804907B97CB554AFF1D19E9E18BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\RFP-000000143579.js
1⤵
- Badlisted process makes network request
PID:2268

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact