General
- Target 06102026_1533_06102026_Bank Slip Of Payment.rar
- Size 1.7MB
- Sample261006-szhbas1was
- SHA256 91e49f3ee58474d415a96c58446f129994bc2ac0ca2678fc8cfd3f9fe94fff8e
- MD5 9765d1d4e1f7c330940c13796cc0712e
- SHA1 c5b8a609d3b5b4f54f1c2d728c88928c70d07c74
- SHA512 90fd008afe15db89d84e79af781d8ddeb5a6ac527bbf47e0bb891590813ddf649d2440b2dc36e398fb74684dfda81ab7bc31f6e4e5278e9c373ff796c904d38a
- SSDEEP 49152:q+Z4cNrG+EAqo2wJsBvCrXzRMrVzBGZKHjLmuYGB94fJq:qq4cTjqoesrXzyZYZKHj6+gc
- TLSH T11B85330873DE179E41AD69430E1985397366F7BE90237ACA028F560B4D1F709E7A72EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Bank Slip Of Payment.js
Resource
win10v2004-20260911-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
Bank Slip Of Payment.js
Resource
win11ltsc2024-20260911-en
13 signatures
300 seconds
Malware Config
Targets
-
- Target Bank Slip Of Payment.JS
- Size 4.3MB
- SHA256 fa9693ab0228147ee3d8107d46fca3129a5f2470b5cedf3956301d046f5a713a
- MD5 b6a48e76a9b4407e3dba633ff4884214
- SHA1 5d4abd3e8300bd76fc7d165d9033f7c0c9bebec6
- SHA512 45cfc865e297f7b85ad925d344b2811d8cc9f4f266b7e150d0a891b2b1abbc9cbad8e432c6962aecf973ef28d28a431c9143ac1c31d446de51cfe1502c443691
- SSDEEP 98304:YBMKOJDb6GJ6X/eGCMFf+NZNStIhnqKtFy6Z03sr0x1aoqR8YEaevAkuK7k7T9aV:NKmmwHwKby6ZclQoqR8YE/eUkPQD4ze
- TLSH T17E264A810F0B94B0B62E572DD076B9500659E51313B9EF3D30B8464BB79EA27678F8E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1