88f5bb365ad7c136b1db913344ee471ae1a5dd7aaf086c18dae5c078cf9a3ed2

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 14:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SWIFT_MT103_PAYMENT_04.pdf _05987725.vbs
Size 7KB
Sample260730-rnrvxstvbx
SHA256 88f5bb365ad7c136b1db913344ee471ae1a5dd7aaf086c18dae5c078cf9a3ed2
MD5 6092e751b4c571ccac8b6b3d1a30ee84
SHA1 70796ed35c7e539bd04eab3ef6f967d067bd9bf1
SHA512 94c8e7ede69db19e68c0a4d4fb6a827ec9937fc8f1273226fe5c84fe5d17f373cbd5ca0b9bd72d432f92fe702f0d456e3b72219c6c6db1e1d5bfdf20aad7da55
SSDEEP 192:vz+jTvlDzeeRZNmRhqo0DuusLDzwfjLZxJ:6jTdDzeeARF02LDzwfjFxJ
TLSH
T1AFF1D00BFD112638C316D3B849B82C9CEC95C1334C6A4858FA9C16282F26EE7B7D45F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3892	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SWIFT_MT103_PAYMENT_04.pdf _05987725.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:3892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads