86e23fa673271308578daf61e783a00662351bab66d74f5f16e16302ad40d8b8

Analysis

user interaction
yes
max time kernel
149s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 09:58

Target
IBAN.js
Size 7KB
Sample260910-lzje2a1fmc
SHA256 86e23fa673271308578daf61e783a00662351bab66d74f5f16e16302ad40d8b8
MD5 5a23f8ab9296139e0585ec17c710386f
SHA1 f4f7bc96a91976b3bd83a6a18371900708ac16ae
SHA512 d34a55d75694056675f4b956fd474bcb2fee5a6c51241c09cac33490f2e455e2a9379041f8e92116f87c7f5ce117f449f048053548adcc8f7558a063d6ad7ebe
SSDEEP 96:2ScZtfnc/g+jGXO8/CqlGyBWr4rJT1rzkw8rXGK1iC1UbHK1B6XR3:2SecTjJxql5B46JdzkzNkCQqS
TLSH
T11DF1F7EF1F3C17319A771046A11D0AABA9F047F57ACAAC7892605E1276B9811CF8D4CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\IBAN.js
1⤵
- Badlisted process makes network request
PID:4572

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact