e50819a1652bdf60880dff6370b2f3989fe762c730fc3df22e1e6a1f4654914f

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 16:50

Target
PRE+BUNKER+QUANTITY+SURVERY.js
Size 61KB
Sample260816-vclfjsscqa
SHA256 e50819a1652bdf60880dff6370b2f3989fe762c730fc3df22e1e6a1f4654914f
MD5 3b458c7ae3cc67ac05b3a3fe0ec8be5a
SHA1 75458cb55e1f0bd1bd58e5b6441c52a118e4eb81
SHA512 f86626da0ad75a1c6b7b4fbb7bcedd742cd4b0303b318ee31cd8d64ab936c8f5f32f86a541b192362de30224a3a0fb196c24b3d6899b31c4c907c4cd1897fc70
SSDEEP 768:iUpDU4ZqQxcZaVph473QeRaTd2d1bcl7N1cOwJ32KL30V5npadqMdHRK9BeobXa8:XjeoTdylc093NyUIlEHk7EM0L1GDsU
TLSH
T1BF53859463C6B4A813D75B7F7A2FB0D9F16E09DA2D804487F288F8A4F934219D9D1B34
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 6 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\PRE+BUNKER+QUANTITY+SURVERY.js
1⤵
- Badlisted process makes network request
PID:3472

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact