General
- Target OTBank_Payment_28_07_2026_440802.pdf.js
- Size 6.2MB
- Sample260728-x9pwcatfrc
- SHA256 309373483b37a15cf1f6372a918418681c4fbc549cc128429c672e8d837dbf88
- MD5 28abf9601234e3e8a372878eafcf589e
- SHA1 2061168b948a71fe6b2f5f55621f4e27fd3e07dc
- SHA512 d99ab61358a83000d0a9bfc859b1b9f9610b02274aea538a2ba17bc91f9cfcaab1f8f30d46ca0c36bda526cd16ea35eb27e88c83bd6bf724a46f70bcd5e126cb
- SSDEEP 49152:SdBawcWYI3hJhdOQ2t8X7xfN3jVR4E0oRADEWm:SdB0W3db0E0RDEWm
- TLSH T117668389EEF722419D4370394BAF1042F1B9AA0B544DDD40B90EE3705FB162925EEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OTBank_Payment_28_07_2026_440802.pdf.js
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
OTBank_Payment_28_07_2026_440802.pdf.js
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target OTBank_Payment_28_07_2026_440802.pdf.js
- Size 6.2MB
- SHA256 309373483b37a15cf1f6372a918418681c4fbc549cc128429c672e8d837dbf88
- MD5 28abf9601234e3e8a372878eafcf589e
- SHA1 2061168b948a71fe6b2f5f55621f4e27fd3e07dc
- SHA512 d99ab61358a83000d0a9bfc859b1b9f9610b02274aea538a2ba17bc91f9cfcaab1f8f30d46ca0c36bda526cd16ea35eb27e88c83bd6bf724a46f70bcd5e126cb
- SSDEEP 49152:SdBawcWYI3hJhdOQ2t8X7xfN3jVR4E0oRADEWm:SdB0W3db0E0RDEWm
- TLSH T117668389EEF722419D4370394BAF1042F1B9AA0B544DDD40B90EE3705FB162925EEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1