de336c943f01b996a0e57f36ab1e36236cf82d591e6994f47b537b060be3645f

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 10:37

Target
NBO260606825 HBL TLX.js
Size 97KB
Sample260826-mn29facg73
SHA256 de336c943f01b996a0e57f36ab1e36236cf82d591e6994f47b537b060be3645f
MD5 bce77f9c521de3432787ef77ad479da7
SHA1 0a7efcc12daee28a92ae7b7ad326ccf6c2771cfa
SHA512 afa868f8c3ecfa87c0a6952184e4f4f893aa4dff5146aee90b309511a304f32b1d8029f4ddd1d33aff91c07805518aee999649151fe9d67a54a917c61b8432da
SSDEEP 768:3c3wK6RF9R+vF1GULN9VqlPw5ZdFH8u4ifwsvyHhStl1nAjPsPxtX128XzSeECYV:33K6RDRWrlYTfJiEjsC8E
TLSH
T161A34264A583658043777F3FB22A9CD4E6760BB70240895FF47CA460AFF1816DEE08B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 7 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\NBO260606825 HBL TLX.js"
1⤵
- Badlisted process makes network request
PID:5540

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact