fc675b6c3333a4c20c2d0910017d91ecf70aea38fab054a2a11c1ef963f352ef

Analysis

max time kernel
298s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/09/2026, 14:35

Target
TC.js
Size 1.2MB
Sample260909-rydfaafp4z
SHA256 fc675b6c3333a4c20c2d0910017d91ecf70aea38fab054a2a11c1ef963f352ef
MD5 92e32e6137cbf9ca376903054ec224a1
SHA1 a1aeacc21c12b72f8a4489fbbeadbd95379f9702
SHA512 82037cb63124b6d9e7ffe37a358602ac8db8a3c96cc10d2c6b22a6beb68e0e79372f71e455edc41b8f9c82949e067edc91fe1209ffdd0c5830bb4d149e19f16d
SSDEEP 12288:oKGpTY5Epppp3LnWFo/2Q10hBPvwZEgsi24UuAl6cEqrzl8N5sTq5QhppP5dm5Eg:WnqoNPZEgsFp7cVb
TLSH
T15B45322EB939B0588CCA3126623963B1C44A5EBF63375BCB2C10FF95A542CB5DC62717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	3412	wscript.exe
7	3412	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\TC.js
1⤵
- Badlisted process makes network request
PID:3412

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact