General
- Target BankSwiftmessage.bat
- Size 9KB
- Sample260520-vw11caex7r
- SHA256 0ac5a2fce62d142d67fbe20caa50adcfec57ad7efc5f48f06f0d04788686f12a
- MD5 4cad13381046160f8715cf095fe2889b
- SHA1 7eb4836ef7f41cd7448cf44fcef5c79d78a9a1dd
- SHA512 dc3b675c80b0206c65b54ef4db74aea090d52c9545f27d889849e050e1822e3a01ee18f194228b3475807cb6bac5aac6f3de7cb61535233000da52eb397b6982
- SSDEEP 192:AYiBxx1efIPeEfO071rD6NfD8YRZ77jis5mK7ZVSwBcE78arI:AnT1veEfO4/6NfIYRV7jizK7ZswBcU8P
- TLSH T1B622F13CC8F4BDC08B8F33D0A59EFFD520569B1BAF674739B59904611B50621EBA84AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
BankSwiftmessage.bat
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
BankSwiftmessage.bat
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target BankSwiftmessage.bat
- Size 9KB
- SHA256 0ac5a2fce62d142d67fbe20caa50adcfec57ad7efc5f48f06f0d04788686f12a
- MD5 4cad13381046160f8715cf095fe2889b
- SHA1 7eb4836ef7f41cd7448cf44fcef5c79d78a9a1dd
- SHA512 dc3b675c80b0206c65b54ef4db74aea090d52c9545f27d889849e050e1822e3a01ee18f194228b3475807cb6bac5aac6f3de7cb61535233000da52eb397b6982
- SSDEEP 192:AYiBxx1efIPeEfO071rD6NfD8YRZ77jis5mK7ZVSwBcE78arI:AnT1veEfO4/6NfIYRV7jizK7ZswBcU8P
- TLSH T1B622F13CC8F4BDC08B8F33D0A59EFFD520569B1BAF674739B59904611B50621EBA84AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.