c64eabac2b00bea34fa9481a7ede2b7df2da27c6fb65e196e21ed40bfb87000b

Analysis

max time kernel
148s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/09/2026, 12:32

Target
New RFQ SEPT. 04262601.pdf.js
Size 22KB
Sample260904-pqrltsxtes
SHA256 c64eabac2b00bea34fa9481a7ede2b7df2da27c6fb65e196e21ed40bfb87000b
MD5 efe20978d852685a164b93a6bec0d689
SHA1 05024d96ba3c98a2c7dcb89ef6d9f30fb69743bc
SHA512 c92c6dfa4a9c9bcb7f37b40e27fd9a6939b968bc009727a27165c46111e59ce101e1855eaec3c8caa919fdffb06f9a1d54a281abd93189037bf0919b2c853fbc
SSDEEP 384:3j7WeI2hJoHkRKbGmY6+c1ZPTEyifWA7dUzxm4NGfQKTaLgKX2gUaU1exx+PjF/R:HWeqkRDmY6+c11FifWA7dUzxmAGfQKTF
TLSH
T131A2EE489A93A44463376B7FB72BA8E5F676076B00844517B87CB4449FF2C0ADDD0CBA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 5 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\New RFQ SEPT. 04262601.pdf.js"
1⤵
- Badlisted process makes network request
PID:1208

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact