General
- Target Line-GMUWR9.zip
- Size 1KB
- Sample260709-pfj41aa13w
- SHA256 5c0fd1aed1aef582eec09f2d827821f6b8265ad2bc2f50bc48eda8fbeadd1404
- MD5 75f01629054bcff2cb94d486fa8a92a8
- SHA1 106f7b14d15029c3578d8a1d8c9ad341994fcb32
- SHA512 f61e61691a5a3d69e3e9b791f542d39108b463057468432a0b0cd6418b30bf68a9dbd8f832efc28e3947baf98d4fdf543ad445b5bb2a5a7653aa89e115fdc621
- TLSH T1C2219A854E1EFD56E1758FBCA138BD49A91106B9552BCCA70534B006E0D0F477ACE467
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Line-GMUWR9.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Line-GMUWR9.hta
- Size 3KB
- SHA256 e482eee2fd7cf15e77c27b398224fa9a8d7b9f09967a765d34c84dfe4dc33a06
- MD5 e325c76d572265307f95cf1caa39f884
- SHA1 6734c994d522f1508a91293b91634c7b227da367
- SHA512 54e6429206d628b8327571b263b500c2bdf6fbd651fe81df9cc7eda7a74db1a107b71b97fff8d6b9212d35810edf0a9ec612a765a78dec48d0e492d0f267ddca
- TLSH T1DA6165F3794682C6BC329A9B1E6F509D509027021366E4F8E6E6DC00DF8DF5945B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.