SWIFT_MT103_PAYMENT(39498).zip
- SHA256 96447d356c488a8c48af60f8d5e591677a000dda8444f2f91bba5e02a7b392b2
Overview
overview
7Static
static
1SWIFT_MT10...12.vbs
windows10-2004-x64
5SWIFT_MT10...12.vbs
windows11-ltsc_2024-x64
5SWIFT_MT10...56.vbs
windows10-2004-x64
5SWIFT_MT10...56.vbs
windows11-ltsc_2024-x64
5SWIFT_MT10...52.vbs
windows10-2004-x64
5SWIFT_MT10...52.vbs
windows11-ltsc_2024-x64
5SWIFT_MT10...25.vbs
windows10-2004-x64
5SWIFT_MT10...25.vbs
windows11-ltsc_2024-x64
5hqDQjP/56737352.pdf
windows10-2004-x64
3hqDQjP/56737352.pdf
windows11-ltsc_2024-x64
3hqDQjP/Log...ed.msi
windows10-2004-x64
7hqDQjP/Log...ed.msi
windows11-ltsc_2024-x64
7hqDQjP/install.vbs
windows10-2004-x64
7hqDQjP/install.vbs
windows11-ltsc_2024-x64
7Static task
static1
Behavioral task
behavioral1
Sample
SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_59643712.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_59643712.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
SWIFT_MT103_PAYMENT_02.pdf _SWIFT_EX_98064256.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
SWIFT_MT103_PAYMENT_02.pdf _SWIFT_EX_98064256.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
SWIFT_MT103_PAYMENT_03.pdf _SWIFT_EX_56737352.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
SWIFT_MT103_PAYMENT_03.pdf _SWIFT_EX_56737352.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
SWIFT_MT103_PAYMENT_04.pdf _05987725.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
SWIFT_MT103_PAYMENT_04.pdf _05987725.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
hqDQjP/56737352.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral10
Sample
hqDQjP/56737352.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral11
Sample
hqDQjP/LogMeInResolve_Unattended.msi
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral12
Sample
hqDQjP/LogMeInResolve_Unattended.msi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral13
Sample
hqDQjP/install.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
27 signatures
150 seconds
Behavioral task
behavioral14
Sample
hqDQjP/install.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
27 signatures
150 seconds
General
- Target SWIFT_MT103_PAYMENT(39498).zip
- Size 37.3MB
- Sample260730-rnrvxstvbx
- SHA256 96447d356c488a8c48af60f8d5e591677a000dda8444f2f91bba5e02a7b392b2
- MD5 1963904b07e9e901dd89da65672219c1
- SHA1 5c29bf241b962975b7221c7c5ee5e321f30c6499
- SHA512 803878ae3a220a00271541b625c924514ba55637b6b7318384a31b11fd570d4b762243efdd3e2a70a765494edfff85d3b13f4aaaa2381d4bd2151c6b89934c72
- SSDEEP 786432:6dwm/GCb6M1VN4OkZVIpkOs0om4B+vf74BALjAZ/:62meCbpKVokOsVRBO02jC
- TLSH T1CA872217A6E60164D5BAC138CB6BA546FB723C0613306ADF12A8B2556F73BF01A7F314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
SWIFT_MT103_PAYMENT(39498).zip.zip .vbs 37.3MB
-
SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_59643712.vbs.vbs 7KB
-
SWIFT_MT103_PAYMENT_02.pdf _SWIFT_EX_98064256.vbs.vbs 7KB
-
SWIFT_MT103_PAYMENT_03.pdf _SWIFT_EX_56737352.vbs.vbs 7KB
-
SWIFT_MT103_PAYMENT_04.pdf _05987725.vbs.vbs 7KB
-
hqDQjP/56737352.pdf.pdf 94KB
-
hqDQjP/LogMeInResolve_Unattended.msi.msi 37.2MB
-
hqDQjP/install.vbs.vbs 7KB
SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_59643712.vbs
- SHA256 88f5bb365ad7c136b1db913344ee471ae1a5dd7aaf086c18dae5c078cf9a3ed2
- MD5 6092e751b4c571ccac8b6b3d1a30ee84
- SHA1 70796ed35c7e539bd04eab3ef6f967d067bd9bf1
- SHA512 94c8e7ede69db19e68c0a4d4fb6a827ec9937fc8f1273226fe5c84fe5d17f373cbd5ca0b9bd72d432f92fe702f0d456e3b72219c6c6db1e1d5bfdf20aad7da55
- SSDEEP 192:vz+jTvlDzeeRZNmRhqo0DuusLDzwfjLZxJ:6jTdDzeeARF02LDzwfjFxJ
- TLSH T1AFF1D00BFD112638C316D3B849B82C9CEC95C1334C6A4858FA9C16282F26EE7B7D45F9
- MD5 SHA1 SHA512 SSDEEP TLSH
SWIFT_MT103_PAYMENT_02.pdf _SWIFT_EX_98064256.vbs
- SHA256 88f5bb365ad7c136b1db913344ee471ae1a5dd7aaf086c18dae5c078cf9a3ed2
- MD5 6092e751b4c571ccac8b6b3d1a30ee84
- SHA1 70796ed35c7e539bd04eab3ef6f967d067bd9bf1
- SHA512 94c8e7ede69db19e68c0a4d4fb6a827ec9937fc8f1273226fe5c84fe5d17f373cbd5ca0b9bd72d432f92fe702f0d456e3b72219c6c6db1e1d5bfdf20aad7da55
- SSDEEP 192:vz+jTvlDzeeRZNmRhqo0DuusLDzwfjLZxJ:6jTdDzeeARF02LDzwfjFxJ
- TLSH T1AFF1D00BFD112638C316D3B849B82C9CEC95C1334C6A4858FA9C16282F26EE7B7D45F9
- MD5 SHA1 SHA512 SSDEEP TLSH
SWIFT_MT103_PAYMENT_03.pdf _SWIFT_EX_56737352.vbs
- SHA256 88f5bb365ad7c136b1db913344ee471ae1a5dd7aaf086c18dae5c078cf9a3ed2
- MD5 6092e751b4c571ccac8b6b3d1a30ee84
- SHA1 70796ed35c7e539bd04eab3ef6f967d067bd9bf1
- SHA512 94c8e7ede69db19e68c0a4d4fb6a827ec9937fc8f1273226fe5c84fe5d17f373cbd5ca0b9bd72d432f92fe702f0d456e3b72219c6c6db1e1d5bfdf20aad7da55
- SSDEEP 192:vz+jTvlDzeeRZNmRhqo0DuusLDzwfjLZxJ:6jTdDzeeARF02LDzwfjFxJ
- TLSH T1AFF1D00BFD112638C316D3B849B82C9CEC95C1334C6A4858FA9C16282F26EE7B7D45F9
- MD5 SHA1 SHA512 SSDEEP TLSH
SWIFT_MT103_PAYMENT_04.pdf _05987725.vbs
- SHA256 88f5bb365ad7c136b1db913344ee471ae1a5dd7aaf086c18dae5c078cf9a3ed2
- MD5 6092e751b4c571ccac8b6b3d1a30ee84
- SHA1 70796ed35c7e539bd04eab3ef6f967d067bd9bf1
- SHA512 94c8e7ede69db19e68c0a4d4fb6a827ec9937fc8f1273226fe5c84fe5d17f373cbd5ca0b9bd72d432f92fe702f0d456e3b72219c6c6db1e1d5bfdf20aad7da55
- SSDEEP 192:vz+jTvlDzeeRZNmRhqo0DuusLDzwfjLZxJ:6jTdDzeeARF02LDzwfjFxJ
- TLSH T1AFF1D00BFD112638C316D3B849B82C9CEC95C1334C6A4858FA9C16282F26EE7B7D45F9
- MD5 SHA1 SHA512 SSDEEP TLSH
hqDQjP/56737352.pdf
- SHA256 1cc7143891d7164c71d7f180db7be94ffe1fd530aad78b648ec4d2ad3607bc1b
- MD5 afa4a24080a202b5abd8ec1a731f59c8
- SHA1 f71b8032abea1aa71c7d9dcb3e1c8b6c7c9cbe58
- SHA512 7bd2bb2fe4865c527410350b2d759dd6aabc2197180b2e51a07e3b589871a756e7803e0c0b5677ec50bd2687f443a8e92dd121013a375f7b276359c57eb4ebd9
- SSDEEP 768:uD/sm/9JJRHR2t4v4FQl2AXf9hNsixRHJc7TMsY9d+xQaspeEmVXla1RD:s/cKPxY7TVY9d/jx0Xe
- TLSH T18993B4144DB49DCAE05FD9F167BD3424DAE730B3F6C61A26322C4261CF02DA6D98E68D
- MD5 SHA1 SHA512 SSDEEP TLSH
hqDQjP/LogMeInResolve_Unattended.msi
- SHA256 16f92782bd3b522b24ea25c3c0707f75d538d49a99b490ed3c24124a6d586535
- MD5 61a515dee5380a93bd5afe980d7dd1e7
- SHA1 0ba0a003eaebd19967bd9c031c8271d709743a82
- SHA512 78b0e3b5d77409b363da181db5e1012e7fff15fdca0cc775b601edfe732c6e221cdc0082ca2725a3644f2518505bce3f1f64bc3d8a1d3ccb998d7e00a62765e9
- SSDEEP 786432:6dwm/GCb6M1VN4OkZVIpkOs0om4B+vf74BALjAZ:62meCbpKVokOsVRBO02j
- TLSH T1EC872217A2EA0164D9BAC138CB6BA546FB723C0513306ADF02A4B6556F73BF05A7F314
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
23221b0458104e0ac0c8d123b5a1ade77bc13ef2851677521c689c95e89fdbe1
Digest Algorithm
sha256
Digest Matches
Trusted
Prehash
Signing Certificate
SERIALNUMBER=5984112,CN=GoTo Technologies USA\, LLC,O=GoTo Technologies USA\, LLC,L=Boston,ST=Massachusetts,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jul 28, 2026
SERIALNUMBER=5984112,CN=GoTo Technologies USA\, LLC,O=GoTo Technologies USA\, LLC,L=Boston,ST=Massachusetts,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=5984112,CN=GoTo Technologies USA\, LLC,O=GoTo Technologies USA\, LLC,L=Boston,ST=Massachusetts,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=5984112,CN=GoTo Technologies USA\, LLC,O=GoTo Technologies USA\, LLC,L=Boston,ST=Massachusetts,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0e:ad:3a:3f:fa:70:c0:a2:0a:e2:36:81:89:93:51:53
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 21, 2025 - Aug 22, 2028
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
hqDQjP/install.vbs
- SHA256 66cd2d2a533b9ac820fd8c760e8390274e02ca0c96c3646786383102f2b76545
- MD5 d2567038bfcd724a1992159cba3f6f55
- SHA1 79a2f57da31229293cbdbccd1eae0a67751e472e
- SHA512 d6d14d98d34f97c839a4c4400092a1ed29fd626a49df52565007bbb2cbe9d31176302f7c091cfaa8efae23f7501e65374019806650e21f86f876287c5de6ae6d
- SSDEEP 192:c1O5A2wy8J5HNBo2V+KvE+lKyFVrNPT+82OuTa4SfqPwY:cuA1bBa2MKvEYKyFVrNPT+1OmIY
- TLSH T1EDF19257BEA3433096D384A891AA0C2D96E6D727506B4492FFDC48941F18BFD93F08D8
- MD5 SHA1 SHA512 SSDEEP TLSH