General
- Target Payment_31_07_2026_5219.pdf.zip
- Size 518KB
- Sample260731-pkvfjasfra
- SHA256 751c704789abf69b807a639557c5fe10a54400c0b704be679b090bf55825a085
- MD5 3247f5616e887b81509b8ee9e06040f4
- SHA1 516c19b4808ef134c696f9deef62591e6c1ab8ee
- SHA512 5bd9bafcfcd348a36dab31304341d9edc907e06cfa630f053759ca93960b0eea57dace5f39b73f25a6ec3bfbff9bcb629f1bf4510da3d0d2565ad3c6cfcf6a4e
- SSDEEP 12288:tNaZuoETRsl8yx/CiF5ErEnirYj0umFTo8inoxhuX1y7V:tNaZ6Ry8W6siEicgD1cFW
- TLSH T1F0B423A4ED744C77FE802AEBA913F3741CA81E578A76958E1917C0FE32AE444C88D653
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Payment_31_07_2026_5219.pdf.js
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payment_31_07_2026_5219.pdf.js
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Payment_31_07_2026_5219.pdf.js
- Size 2.7MB
- SHA256 8a833aeae48c86d721aaf3df62dc9a9a04eefceebe31ad4f0ceeb1f44de9fed5
- MD5 0cfd74f50578fee7ba6bff9e56349b3a
- SHA1 b5745c7f24bdc5c8c68f1c0cb08a8ebb6e18e593
- SHA512 c872a380ae2b57ba1cc143c38faab61f431a4c97aa54c899c04e746c812f95383e3a40b6ea51ae0f550124906badbd38da45fc5715af8e29ea6bea4539b4d57f
- SSDEEP 12288:a4GIsd8Hh4jaRsDSDVlGaRKJQyazDX2c81mQJAZMayIHa:axIfHh4javVlGaRyQ7zDX2c81mQJhPua
- TLSH T167D59389AEFB22419D4370394BAF2042F1B9AA0B544DDD40B81DE3705FB162925DEBFD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1