Analysis
- geolocation tags
cacanadananorth-americatoronto - max time kernel
899s - max time network
419s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/09/2026, 17:38
Static task
static1
Behavioral task
behavioral1
Sample
Untitled-1.js
Resource
win11-20260911-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
Untitled-1.js
Resource
win11ltsc2024-20260911-en
1 signatures
900 seconds
General
- Target Untitled-1.js
- Size 138KB
- Sample260922-v778ssbf89
- SHA256 ac0939a2b9b9ec47773eac85d3d2928301de5407c5711e9cb70549ca74a70643
- MD5 e41e905e70d76b6bbf650e20fdfc36b7
- SHA1 8e943de851e5553b680b7276ecf17262128cccc7
- SHA512 de81a1821a7af9622107ae31cca0ab3e84503c0baed53c34bd0604495930f02b0262fd1f80ea082c0f498cc5c5cfd03c8e9634c4a64a4b78b1faf56b083c825c
- SSDEEP 1536:8xfW7HWMuUn/FeK7WwILyhbl0jUvdUuUvVwIBU/B1sl2BDEuiwIeUUbwI1U8uDT0:NodmtHUMRjQ8
- TLSH T1D4D31F4E6BA561618273B3788F5FC004F93A147B854687457EAC91E26FB042887F9FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\Untitled-1.js1⤵PID:2352
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5244
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5364