5253488658a4b04eab507180bcc24395e31bda8ab254248d024a3244c60406b2

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 14:10

Target
b57e46c3fa90bda23ffb9f1a5b7d962dc2226734653d92349bef54265e78684e_offset-manipulation.js
Size 1.0MB
Sample260913-rgprzsgn21
SHA256 5253488658a4b04eab507180bcc24395e31bda8ab254248d024a3244c60406b2
MD5 895a31406180a38fa751966d4c2dcf01
SHA1 0c97fd34bc50fc8b0d1ba773df3364663c242419
SHA512 b9be73d2f3b39a034438a6d97fc57f505d3073f6db9f4e33522cc24e4bfcde8201344399695ad07c17616d348261d8090bb8123356b2f5562125187d99082c21
SSDEEP 96:JZSWnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnC:JA
TLSH
T14D2512676550281CC1C090EC92D5FF5DCEEB76D9F60AF4E214A1EFDFA250B7989208AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	4628	wscript.exe
3	4628	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\b57e46c3fa90bda23ffb9f1a5b7d962dc2226734653d92349bef54265e78684e_offset-manipulation.js
1⤵
- Badlisted process makes network request
PID:4628

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact