General
- Target OTBank_Payment_doc__28_07_2026_241757.rar
- Size 1.2MB
- Sample260728-pg9faawyfz
- SHA256 899b2e97d28aadae084d0bb65ed2d1873b10f47b8c32f73829aa588880f1f597
- MD5 9ce9153f91e17d8869089f513f094766
- SHA1 9cff3739e5bacac54ce0de1f51896dcf6cb29c90
- SHA512 3a39d37a2aecc5882265dbe41d4b60af91273755e085540e9f910d0e0c405c48fd9d49d5271908dd0f21a84819291768e09c46549f14549e7ed514b56a366f76
- SSDEEP 24576:ZeWoDu3AxOanSSwiPIfyqETiqUfLJPXk6WW8tk0JtiKDJa0r8pzV2o8Mpf+WJ:ZeWoS3oOanSDiPPqETipfLq6z0qyR8pp
- TLSH T1DA4533F652449987A0C68BEA153530DF79FA2F41980F83C53F3AE141D6B4E2ECC2295B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OTBank_Payment_28_07_2026_241757.pdf.js
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
OTBank_Payment_28_07_2026_241757.pdf.js
Resource
win11ltsc2024-20260710-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target OTBank_Payment_28_07_2026_241757.pdf.js
- Size 7.7MB
- SHA256 4b0734311aad9bd162323fd9069c333d8ee2a10a1c9a10d4f4aba1bf3e57c749
- MD5 db9d169a602d9c5cdc2359ec98588ffc
- SHA1 873149cd60ab7940d6e2f7e91f8b832818ce99cf
- SHA512 6a40606014e79b633c01ad4a7ac417c1972f9750cfd588620d1b6d27ec83af04b6c0b33eb006fc5c1635f3448356f2694671fad381870b94b9e03556ae11344f
- SSDEEP 49152:M0pWqA3EWsZHtQNxSIDF15aJf8j0h1U1ku9CtYxXMPEbPXmw16f:M0pWDEWjNxSIDr5aJf8j0h1U+DEb4f
- TLSH T174868289EEF722419D4370394BAF1042F1B9AA0B544DDD40B90EE3704FB162965EEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1