5092af1d9f3ac75b55efe21aa2a736c71015ca1fe73f2de859384b0288a044fc

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 14:33

Target
b201a03fc29a92568f2b8eb6b1e838f6f219113c0b523dae531ea737ab9da912_pre-append.js
Size 9KB
Sample260913-rw21vsgr41
SHA256 5092af1d9f3ac75b55efe21aa2a736c71015ca1fe73f2de859384b0288a044fc
MD5 6da81900270eea42aa1bbdc6791f1c17
SHA1 e1ea7d17041865075c43ead0e1ace396f934f76e
SHA512 38be6d1e255012cf4f2c50c4802a98a5c56b97cc8eaecbccee35bf819fc8753304089f56290f63676c992d50db67fb49ffdf6e9ede86118fbd3a467b9c3f48e3
SSDEEP 48:rvwB+acBQgzmBl2DxAUhrTBiHjacB7T2eBG5MSWBtacBuR9R4uLBA5SMwacB9T57:r4OUi9brT2DLg5DWXgzR2OBZZSkefW
TLSH
T10012EC22A5A33C2FFF89A10EF6149CD69E15EF1042FEDC44182A7F42D5378096A2E5D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	4164	wscript.exe
3	4164	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\b201a03fc29a92568f2b8eb6b1e838f6f219113c0b523dae531ea737ab9da912_pre-append.js
1⤵
- Badlisted process makes network request
PID:4164

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact