General
- Target azienda_37.hta
- Size 6KB
- Sample230207-mq46tabb57
- SHA256 2c9d85fd5b94dc9af67d408e2e269f59d89bad35a6df94dc49275ae6793a4bbc
- MD5 0df25caaf1360f90af9a39b230fc032c
- SHA1 6a1b77dbd64331e47b9ddf436e7f416c80dfe8c0
- SHA512 de4aa6dd02041990e8b6613a80a5ace02a852cb263c46b07753560ac4c6c0e87b57ae11b729736a2a207d568db318b37b12ca961a4fe4de9bfa56c9461ad3ae8
- SSDEEP 96:wEn1DLVTUoPg2pwTEeD4b7KdaO3iOaLt3M8Mn3XTPMJsb0ODcFE+Voq3V4dnr96k:PRU77rIKdn863jMM0OD9+VVF45x/CI
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
azienda_37.hta
Resource
win7-20221111-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
azienda_37.hta
Resource
win10v2004-20221111-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target azienda_37.hta
- Size 6KB
- SHA256 2c9d85fd5b94dc9af67d408e2e269f59d89bad35a6df94dc49275ae6793a4bbc
- MD5 0df25caaf1360f90af9a39b230fc032c
- SHA1 6a1b77dbd64331e47b9ddf436e7f416c80dfe8c0
- SHA512 de4aa6dd02041990e8b6613a80a5ace02a852cb263c46b07753560ac4c6c0e87b57ae11b729736a2a207d568db318b37b12ca961a4fe4de9bfa56c9461ad3ae8
- SSDEEP 96:wEn1DLVTUoPg2pwTEeD4b7KdaO3iOaLt3M8Mn3XTPMJsb0ODcFE+Voq3V4dnr96k:PRU77rIKdn863jMM0OD9+VVF45x/CI
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.