7434e8908a7f588bf8ffdf34efd87af4bf86f8f4b517fb85e4781e1850d78ebc

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1C26TLL_00001453.js
Size 27KB
Sample261009-sd4bmsas3s
SHA256 7434e8908a7f588bf8ffdf34efd87af4bf86f8f4b517fb85e4781e1850d78ebc
MD5 4b36391b50c89fa912e3e9c5ac6695e1
SHA1 39d96517ae4ac9fd3c817602418b85a4a3925d11
SHA512 a67b122a8ba138c0e88a6488c9affa89e98c802cc0f9873bc4ed2795f4be116916cc47202b267c6dc7280bbf5d73fb0a5072878e87f5c72705763d9304f0fd14
SSDEEP 768:4MGJRZC0v5jrf8jHBbGsD3GFyTmrbJDYGFfnMo5cPWjWJ05TNVeO0y0l/6Qx+:4MTbKBz5/JNVkw
TLSH
T137C2FD44868574845333673BEA2BA8D4F77B0AAB01804907B97C7495EFF4A09DFE0DB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Signatures

Badlisted process makes network request 5 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	628	wscript.exe
5	628	wscript.exe
7	628	wscript.exe
8	628	wscript.exe
9	628	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	wscript.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\1C26TLL_00001453.js
1⤵
- Badlisted process makes network request
- Reads the TCP/IP host and domain name from the registry
PID:628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads