d7c851428e8d43098b4df9ab4f4894694007a8fa55c78827883b35634a0491a8

Analysis

max time kernel
298s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/09/2026, 15:01

Target
Social Security Statement 2027_wrapped.jse
Size 1KB
Sample260909-sdvphafr2s
SHA256 d7c851428e8d43098b4df9ab4f4894694007a8fa55c78827883b35634a0491a8
MD5 6f6e4b0dcdfbbdd76bc68b5f6a54b392
SHA1 3f484f4e8d7efd23d5c6f386edf8a28914b82749
SHA512 a2fc13bbbc49f471b9a19bb0050245ec6a572b13dc654422c7e78f52925035f3556985e9db7a68e2e32c3530cee278eabd5bd9b40d713fc715d99a17147ab15d
TLSH
T10821DD5363605BD468202DE7190C29A7A4F0C93F7E22B0A0E3D48997B03E9953C2C77E
MD5 SHA1 SHA512 TLSH

Score

8^/10

execution

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	1548	WScript.exe
3	1548	WScript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\System32\WScript.exe
C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Social Security Statement 2027_wrapped.jse"
1⤵
- Badlisted process makes network request
PID:1548

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact