General
- Target wecreatedbestbusiness.hta
- Size 46KB
- Sample260423-awg71sf14k
- SHA256 212ef91bad35d2de74440d65e171a6eb615b1f393d7139612921312479b40169
- MD5 cea0350ef1e214089ec371e011a0fcf2
- SHA1 72ae7dccf610bce33939c9f24e01ad75dda07f59
- SHA512 69dd31bcdd3c86d1511f562bede5e9397133f118220003bea55c15a43ec32af9745934915d00d539cada7f0bcee6f0d83ef6d8bffd59cae0a9696950263933c8
- SSDEEP 192:L8/8q7qyqvqsA/IqAqDf6x/k/o4+66/y/p/2:LuO5CZ/Df6o+j
- TLSH T19F23A47FA314544D181FE2646AF8E6929EED9CF96228EB20FA1D157363BD007D83C6C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
wecreatedbestbusiness.hta
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
wecreatedbestbusiness.hta
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target wecreatedbestbusiness.hta
- Size 46KB
- SHA256 212ef91bad35d2de74440d65e171a6eb615b1f393d7139612921312479b40169
- MD5 cea0350ef1e214089ec371e011a0fcf2
- SHA1 72ae7dccf610bce33939c9f24e01ad75dda07f59
- SHA512 69dd31bcdd3c86d1511f562bede5e9397133f118220003bea55c15a43ec32af9745934915d00d539cada7f0bcee6f0d83ef6d8bffd59cae0a9696950263933c8
- SSDEEP 192:L8/8q7qyqvqsA/IqAqDf6x/k/o4+66/y/p/2:LuO5CZ/Df6o+j
- TLSH T19F23A47FA314544D181FE2646AF8E6929EED9CF96228EB20FA1D157363BD007D83C6C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.