General
- Target OTBank_Payment_doc__28_07_2026_258442.rar
- Size 1.2MB
- Sample260729-ap2cbada99
- SHA256 92de9010f77edba3ff166e98c0cbd613b8503b73bd0e4fc460c6d0fdbc705d14
- MD5 4df83fd17a9a9690c4edab73bbd9d233
- SHA1 fae20072a629959efd68583fc37e25f63bc97ac7
- SHA512 09b04eb4785460d3cd1cf20fd2d811caa46d887d1454c3138d52ba540cd06cfd70b6fa16ff2bb9876733c83674accde6dccac00adbdd2565cfc4b234e42d6d5e
- SSDEEP 24576:6n1y4iY28qn0ed5nE8aWUuOcO4aY14fTkOSN4ztv8o3alW7YcMfVH5:Q1iMqn0ed5EA/O4JGOOztrqlqbMD
- TLSH T1C24533A0050B8FCE9080763387411E39AB6D21FEA2066277A7F66C07E774D766A7DC17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OTBank_Payment_28_07_2026_258442.pdf.js
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target OTBank_Payment_28_07_2026_258442.pdf.js
- Size 8.0MB
- SHA256 ae45327e192ffcfa468500fbbe330fbf5c5b7bb4f94c41574a03538ce374c28f
- MD5 660c39ab784fdb4b2309ba77ded7aa1f
- SHA1 91bf436246409150baaa8348ed406c2d0b1e7841
- SHA512 d7b52fd32713039bc7a964bdf808c94f3be86ea400ca349dadf230e8cb8037d6c3635acc6b0fc70a49927e3c522978d030f013bd8eebf25f07328328a8972345
- SSDEEP 24576:pRjHkKxoKXwb0UpHeylncq07tYrX+RJbZFjieOh/icyJ9typGNj5X1ihLYpMj:pyncd7tYrqhDi2cyzNFX1ihWMj
- TLSH T13B869389EEF722419D0370394BAF1042F1B9AA0B544DDD40B91EE3704FB162965EEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1