General
- Target Payment_31_07_2026_212.pdf.zip
- Size 587KB
- Sample260731-ph3zwsseqd
- SHA256 c2b8335569468714676e6f2d9ac73b9dc19565dc787f9ee4e2fdba39af6449d4
- MD5 932b2a611715194fa28c098cbcb56877
- SHA1 36c0c0ad9a932429136cc404043d86c327d83747
- SHA512 6451efa1cee8d7e7288ab66c592d931c04cb852d1a71a74759df5cfe0330254095070ddd9cb2223aa2665d210adf29ed6ca1ebae0693f8730d27ac202c58d142
- SSDEEP 12288:X9YGAjYHr0YuOJL6f5kwssSob0Om5LAlH9+EQtxCY2NtIEmI:NYGAjap1JWf5kcxkAFUrtxC3rIEz
- TLSH T185D423E3B81A50CB4277D98E4054D2FAD99FF6CB82861F2091B81F295021D4CFD6D9BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Payment_31_07_2026_212.pdf.js
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payment_31_07_2026_212.pdf.js
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Payment_31_07_2026_212.pdf.js
- Size 3.1MB
- SHA256 9e42b04cc3372bae43105cad2b160bce6204b6bfc1388a39db8234f04c73099e
- MD5 92e84bc631afdc71ad594df4f4c309df
- SHA1 3ac981ed98ce9192954216f2bae0d605ac999785
- SHA512 ee100a795177b3237343980a9fbb175d0653e2032603272bd8420a1dd8e223467d163fbd64e047f0f766c487c7dabcadea889d7b6ab899019e98d5ccdb7c28f7
- SSDEEP 24576:uxyaXwoR8iXNS2TM2JlPRdmzfk8E7Ew02T59hA:uxyaX/DXNScMOPRdVVTNA
- TLSH T17CE59389AEF722419D0370394BAF2042F1B9AA0B544DDD40B90DE3705FB162965EEBFD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1