0412b4238f4369cf6890e43f981bdea24f3d99e4fc372c0bc385bc61ce7aafe9

Analysis

max time kernel
38s
max time network
41s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/08/2026, 19:08

Target
0412b4238f4369cf6890e43f981bdea24f3d99e4fc372c0bc385bc61ce7aafe9.js
Size 791KB
Sample260821-xtargswbpc
SHA256 0412b4238f4369cf6890e43f981bdea24f3d99e4fc372c0bc385bc61ce7aafe9
MD5 d4e50c334d38114b527a981c41ba28b5
SHA1 664a72b85fe610d7515a4d8ef175c7c16d40afbb
SHA512 4811b4d931d2de4bd6d919ff2b532151c07bd588097426f142d46479f48d762b13d36753ce6dbdc7cb29d99552c6cfeb6fa2adeb8fa7bbd25db51c2f9a49d5be
SSDEEP 192:esJt0HK4j0xBZiyi2Wt1JrMzNeEg6b6bUFrOxdE7sci6qLMCSOexvF7lVynblAP8:G
TLSH
T1F105157782FD2F7EC4275A58CD793C0C98F054A20A4EF47AED3764C9D87CAAA66A0150
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	2660	wscript.exe
16	2660	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\0412b4238f4369cf6890e43f981bdea24f3d99e4fc372c0bc385bc61ce7aafe9.js
1⤵
- Badlisted process makes network request
PID:2660

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact