30616838f14f708744a29bfd68a690fc7efa6915df7b3a2941d9893e7fe9d0a2

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 08:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fiyat teklifi talebi.js
Size 4KB
Sample261113-kpeteshw41
SHA256 30616838f14f708744a29bfd68a690fc7efa6915df7b3a2941d9893e7fe9d0a2
MD5 304809ea319f66bbefa2ac8f56fa56ba
SHA1 f4d6bf24b7a9739d948e74825217ab81d563e5a8
SHA512 998a7ef0c2a8c382e461f1c13245a4636c8b46ee326ccf400c6be319e5652454bd9187a5ed7742adb494167d72fe5f7b0caaa056401b34c4df94a3a44e5116d2
SSDEEP 96:yJKBs3slY5PPqzLVkAjZ7JpEv9XcY7q6iFT:y53slyPP8LeAjZ7Jp+9sYK
TLSH
T149A1DD886D86A06889377778CF5BE608F72E14274602C258B9DC83D29F7132847A4FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Malware Config

Signatures

Badlisted process makes network request 6 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
4	476	wscript.exe
10	476	wscript.exe
11	476	wscript.exe
12	476	wscript.exe
13	476	wscript.exe
15	476	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	wscript.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	wscript.exe

C:\Windows\system32\wscript.exe
wscript.exe "C:\Users\Admin\AppData\Local\Temp\fiyat teklifi talebi.js"
1⤵
- Badlisted process makes network request
- Reads the TCP/IP host and domain name from the registry
PID:476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads