b8f92dc290a2112ce7bafa7f31056d605f4a08c136a223aaaf3ee14fb8397add

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 14:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_33230393.vbs
Size 7KB
Sample260730-rnwtwatvb1
SHA256 b8f92dc290a2112ce7bafa7f31056d605f4a08c136a223aaaf3ee14fb8397add
MD5 ae823166697e56251500168d5965afcf
SHA1 d0bd50b11313137af27386ba6fd4e1a8b9fb9a08
SHA512 8c5ecd02a6289993aafb7c817316846fd739356180b3ad3c77dca9fe8d8b8e0d817ccbe7750863d93681bdeabc51bec91c1e0808aa8ce21843a3c1bd0f5e2f04
SSDEEP 192:vz/jTvlDzeeRZNmRhqo0DuusLDzwfjLZxJ:bjTdDzeeARF02LDzwfjFxJ
TLSH
T16BF1D00BFD112638C356D3F849B82C9DEC95C1334C6A4858FA9C16282F26EE7B6D45F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Signatures

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2220	WScript.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\SWIFT_MT103_PAYMENT_01.pdf __SWIFT_EXP_33230393.vbs"
1⤵
- Executes a VBScript file via the Windows Script Host.
PID:2220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads