General
- Target OTBank_Payment_doc__28_07_2026_974860.rar
- Size 1.2MB
- Sample260728-pg7lpawyd1
- SHA256 1eea4af3fcd21c8a2c0367c29a29208bff9a13261ac1c838f3f88bc376e4c125
- MD5 51c8194bd73d51a2a2aa3e99fe3ecc9b
- SHA1 72d8c2d0a8120b2126dfef0d19352ca5cdaa67e2
- SHA512 9b446787999d9d80da0d4fd0f6c2c4cb2b39b52a7765e5b70332be41a4d5f1a637838eab94c46dbfcf5a0937c6e36c1c13bddff7242080d36f9503645c41fb08
- SSDEEP 24576:MCeWoDu3AxOanSSwiPIfyqETiqUfLJPXk6WW8tk0JticDtakzukc1npzV2o8MpfR:MCeWoS3oOanSDiPPqETipfLq6z0q8pgF
- TLSH T1E84533FA23449987E1CA8BE6152530CF7AEE1F45940F83C13F29D641D6B4D2EDC219AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OTBank_Payment_28_07_2026_974860.pdf.js
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
OTBank_Payment_28_07_2026_974860.pdf.js
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target OTBank_Payment_28_07_2026_974860.pdf.js
- Size 7.7MB
- SHA256 580422298eff7f5578f971095d0c84c686b2621d18a625582e34532c96166581
- MD5 8a92056a5c37d00bdf7c9518755dba19
- SHA1 588f8d276b01ed4f4937e4146ce86b8d34d148fe
- SHA512 1c2c66158b163732a9f7c7a14c8b8e55e23bfec5bffb0a6179657a99054e8eab0ef317feedfd41b7a2e9ae6a7db94340afe77aea6649473caf37f003eb355d4f
- SSDEEP 49152:M0pWqA3EWsZHtQNxSIDF15aJf8j0h1U1ku9CtYxXMPEbPXmw162:M0pWDEWjNxSIDr5aJf8j0h1U+DEb42
- TLSH T1D2868289EEF722419D4370394BAF1042F1B9AA0B544DDD40B90EE3704FB162965EEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1