Analysis
- max time kernel
298s - max time network
173s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 04:20
Static task
static1
Behavioral task
behavioral1
Sample
Draft-BL-confirmation.js
Resource
win10v2004-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
Draft-BL-confirmation.js
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
Shipping-Docs-CI-&-PI_pdf.js
Resource
win10v2004-20260513-en
3 signatures
300 seconds
General
- Target Draft-BL-confirmation.js
- Size 150KB
- Sample260820-ex4vmasvcv
- SHA256 d7d9e6c73696d727b2a8dd462c20ba18f667454c3a3c0577141f73cb5978912a
- MD5 b2ca78f644791004da5e72fd1f09b202
- SHA1 2bc920faa7bae6a0dffd0c7764a600cf792218f4
- SHA512 c2d2a674074d6d6793ecc74b8b237df95d18b11851b14a13b0349a7fe4314919f152ab222edd5aacf00c3df5426f43fa1663eac32845bccb8e47bfabfd557dea
- SSDEEP 1536:eWt6gAD6xB35fWe7icpNycTnknbTtUmBI59N5or3e4TibpYGSfpD9CdKK9JmMo4s:xNHTVWrViuXOJmNLt
- TLSH T16EE332844A8324947337677FB22B7CD0FBAA07A701440947B87CA4959FF592EDBE0876
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 5 3316 wscript.exe - Command and Scripting Interpreter: JavaScript 1 TTPs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.