66b3c82e6d2e13de1fe541e0261ba6b321475933c0c92dfaa85ca8ac2f5b1c95

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 07:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_67484552.vbs
Size 7KB
Sample260730-h3edpsep4s
SHA256 66b3c82e6d2e13de1fe541e0261ba6b321475933c0c92dfaa85ca8ac2f5b1c95
MD5 b45e4c9844821ca985a709b520870e4f
SHA1 69a9673527d56c8cb4ac03617e14f499bcd75ef2
SHA512 c6977d2043883fd80e56c2858e99c3cb40fd0c6c925a409091c57e7c6fb6b03296fa63da130414118bf2a790bdf9dac6ccbb84f30b2dbca3c141440413cb278f
SSDEEP 192:vzcjTvlDzeeRZNmRhqo0DuusLDzwfjLZxJ:IjTdDzeeARF02LDzwfjFxJ
TLSH
T1BBF1D00BFD112638C356D3F849B82C9DEC95C1334C6A4858FA9C16282F26EE7B6D45F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4828	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_67484552.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:4828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads