c7f141658b747a451bdc919da1eb3c5c2ba0b53407d68a3e0ee170148928324e

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 08:43

Target
Order Confirmation#120125B90.PDF.js
Size 584KB
Sample260910-km19ms1akh
SHA256 c7f141658b747a451bdc919da1eb3c5c2ba0b53407d68a3e0ee170148928324e
MD5 461fd08eac6796acdc344dbacbd030e7
SHA1 6385b234ac9a23d34d3cb90d26ef8c9d4aa32aaf
SHA512 4e15cf490866f9b298d206c70b2a7ad7270a7752cc0a418e856896b1e32498a19a03c1a79f47195698d0d453eb10ea7761e4b08cfb49c54bef91f50c15c56108
SSDEEP 6144:zSAN9b3quyuZdrLfp5dDk6bOUB5bfoohyAd6EO1A:zSANF1yujDp5b/r1
TLSH
T169D4324163C478A423431F7BF72FFADAE91A04DD3485065BC329FC9065B9A07E9D1A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	4148	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\Order Confirmation#120125B90.PDF.js"
1⤵
- Badlisted process makes network request
PID:4148

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact