General
- Target WiinRar-S88ZDG.hta
- Size 3KB
- Sample260801-ajtehsbn6s
- SHA256 7ec510939419e5f1aaf570d04d3a91c38907343827da4043473376092f1c41ce
- MD5 cc0adaf39f94f497c72deca8e0ff2e4e
- SHA1 367d0b68418b82f8655d64d67e4ac823a198ab9a
- SHA512 681c62fc4cbf51e75ab0db9d73778cea900a7c533485c97a34ebc7c77df7ad5c7ea3e30749fc0c3e92ebb4483f8593a4e5b54dba518056968a9ae4420bcf2bf1
- TLSH T1FC5164F7BA8652D1BC318A9B5A6F508D54D41A432362E0FCF6C7DC00EF98E5A45783E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
WiinRar-S88ZDG.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
WiinRar-S88ZDG.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target WiinRar-S88ZDG.hta
- Size 3KB
- SHA256 7ec510939419e5f1aaf570d04d3a91c38907343827da4043473376092f1c41ce
- MD5 cc0adaf39f94f497c72deca8e0ff2e4e
- SHA1 367d0b68418b82f8655d64d67e4ac823a198ab9a
- SHA512 681c62fc4cbf51e75ab0db9d73778cea900a7c533485c97a34ebc7c77df7ad5c7ea3e30749fc0c3e92ebb4483f8593a4e5b54dba518056968a9ae4420bcf2bf1
- TLSH T1FC5164F7BA8652D1BC318A9B5A6F508D54D41A432362E0FCF6C7DC00EF98E5A45783E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1