General
- Target Payment_31_07_2026_6110.pdf.zip
- Size 340KB
- Sample260731-relbsahm2t
- SHA256 fbb5f2e9b92820f263f8ee678dbd4101675d25207f745f9bd7bec91f7cfed448
Score
8/10
Malware Config
Targets
-
- Target Payment_31_07_2026_6110.pdf.js
- Size 1.8MB
- SHA256 4e83a52dac15f63025c7367f3979cffe831b448165218f51c54ebbf6a7d28289
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1