General
- Target 1v.hta
- Size 660B
- Sample260415-qrf26afv4r
- SHA256 dda1e993f2856e782bf30ea6c414d72f988247711a9ecd85c7516a5b3a5413f7
- MD5 94e1294b7a6a0cad593cfd46e7f8edb0
- SHA1 2d7ae95e250af22e7e393a4dac1ac22206607a82
- SHA512 4d0a89840c72ad2fcd1e8d1e1232fe96c9b5fa13e41212a8f38e5e54a206f37d3d22a8c61f4357d379fdd10c270968880362cd8be711a34623bbe8a9239655c3
- TLSH T11601D3F1893B8B9C5D77557D51DBF258C59314175249CF813640960A7F31007C30A3DD
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
1v.hta
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1v.hta
- Size 660B
- SHA256 dda1e993f2856e782bf30ea6c414d72f988247711a9ecd85c7516a5b3a5413f7
- MD5 94e1294b7a6a0cad593cfd46e7f8edb0
- SHA1 2d7ae95e250af22e7e393a4dac1ac22206607a82
- SHA512 4d0a89840c72ad2fcd1e8d1e1232fe96c9b5fa13e41212a8f38e5e54a206f37d3d22a8c61f4357d379fdd10c270968880362cd8be711a34623bbe8a9239655c3
- TLSH T11601D3F1893B8B9C5D77557D51DBF258C59314175249CF813640960A7F31007C30A3DD
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.