General
- Target 09072026_0342_DOC-X4P8P9.hta.zip
- Size 1KB
- Sample260709-d9s38ac191
- SHA256 54eab610623e7f058917911ea793263bc6cb5072aab4df0831ae940e636fe827
- MD5 214fe85d1f7d1765b392a99c4d42b425
- SHA1 877f1f3937d40bb8dc3220af9d9502f4ce3a9f7e
- SHA512 5b9ab7287599fa35649b5fac29542a215930f81c617a9baa130ffdd631b31725be2c37d9d978c14dd68e1582ea74b2e4a9dda55bf103db5414f628d6ff0ec8ac
- TLSH T1B321779E73036186C30971B57714AC79360D1B608C6DE92D35EDFC05C922AB9BE47421
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X4P8P9.hta
Resource
win10v2004-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
DOC-X4P8P9.hta
Resource
win11ltsc2024-20260706-en
16 signatures
300 seconds
Malware Config
Targets
-
- Target DOC-X4P8P9.hta
- Size 2KB
- SHA256 c6bcb1af9b1b83ad0a392f1171369ff4313f66c21f0a5a81a21c92f9f5004029
- MD5 e007655e953cd60d8eb063857f6aba19
- SHA1 0354671aa3a0a42d404d691e2111d6584a2ff5b5
- SHA512 44b3e5db3068fa175d0736c5935aaa80f8ee47b6822e13917a1c8a4a93e512ad96a5fc78151873b22af03a178caed53a53be7ff6615b5acbe9b99d1b426bc1ba
- TLSH T1DB5197E7B54662E4BC32499F5B6F50C950E81B431325E1B8FA86EC40AF89E4E8134BD8
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.