ae690e6a8936d0601e1bdb75863fb38401fb2c485845522167883fc345cc8fed

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/09/2026, 12:49

Target
610967370.js
Size 803KB
Sample260915-p2efmshl4z
SHA256 ae690e6a8936d0601e1bdb75863fb38401fb2c485845522167883fc345cc8fed
MD5 631778c91a51a859adddc9ba58aac56e
SHA1 b15017c3d82c0b9d173df05ebdc0ef48daa0bd9e
SHA512 cd293b532ce2836208159dcac2b08536150cfe1386cdfcf44275a7dc52d016455335befd19c4494a40daf96efb059f644f411c40a6ab188e10a29b884f3077cc
SSDEEP 192:eZywhX4H0scYdu8vSDc7wHKtl470v+r1AdiW2tgWPlRXlxXUqM7mqt/feZRvSkXg:1
TLSH
T1F905157682BD2F3DC4275659CEBA3C0C9CF054A10B4EF47AAD3B64C4E57CBDA66A0250
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Badlisted process makes network request 4 IoCs

Network request originating from process or tool commonly abused by malware.

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\610967370.js
1⤵
- Badlisted process makes network request
PID:4148

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact