General
- Target goodthingsarecoming.hta
- Size 11KB
- Sample260714-aknwesc17s
- SHA256 1164aa2fd96db37151aaf75eda4651078651791b82a21322b8849f2c62a7897f
- MD5 d2a6bf358e97223edcbbc6f79b0507e5
- SHA1 dcf27df4734ea53f733835f40973c4a2b06d115d
- SHA512 2f55400df5cf545528251761845f6357f532f3eeedb24d12d7f189c16c393d7f55a320ca99a4330a86916b27aa4ee09f461b8a1ab38300590379293634c6ad87
- SSDEEP 192:FpTa4/uCBuFxiVeuzutsuVu/uXbuVuF0mNj/u8pSbDQt/5K6Zeiiciqhwk:F4k5ISJ4sGb4E/f9
- TLSH T14B32FB8C4480929066FF5A24796C428CBBECB9D6A98179507D1F7CB3B3B412FC1FD968
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
goodthingsarecoming.hta
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target goodthingsarecoming.hta
- Size 11KB
- SHA256 1164aa2fd96db37151aaf75eda4651078651791b82a21322b8849f2c62a7897f
- MD5 d2a6bf358e97223edcbbc6f79b0507e5
- SHA1 dcf27df4734ea53f733835f40973c4a2b06d115d
- SHA512 2f55400df5cf545528251761845f6357f532f3eeedb24d12d7f189c16c393d7f55a320ca99a4330a86916b27aa4ee09f461b8a1ab38300590379293634c6ad87
- SSDEEP 192:FpTa4/uCBuFxiVeuzutsuVu/uXbuVuF0mNj/u8pSbDQt/5K6Zeiiciqhwk:F4k5ISJ4sGb4E/f9
- TLSH T14B32FB8C4480929066FF5A24796C428CBBECB9D6A98179507D1F7CB3B3B412FC1FD968
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.