General
- Target Termo de Adesao-WFM0CF.zip
- Size 1KB
- Sample260801-phhnysad87
- SHA256 5cb91b96f185942d9cb42d452de1469318dc404e1fcfbec17a08eea5d286c9ff
- MD5 7de406e24a7fcf2f845c2fe490592b99
- SHA1 3b1bd2bf521e8a05d2ad592de16aacba13ff819f
- SHA512 797f90e4bc171a8461ee60e5ce71250822dc3c60660a60b7ee3ef995b2657f200ed19e7a472b2bbe5a4e11ce1431a64007a4529fe2e4101f7d8ad0dd6146aafd
- TLSH T1A521EAE1CD5291E2D9FBDE342500F07A2DD01E900939B040B1795AD365252C14B0F64B
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-WFM0CF.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-WFM0CF.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-WFM0CF.hta
- Size 3KB
- SHA256 6fdfa59e6e6cc23453a3c01254489b3cb0b06d12219e16ea4162638902ca485c
- MD5 26d568988eab793e0626a76fba1191b1
- SHA1 46c0b0130159b2c4796736676d2df267c50909e3
- SHA512 9c62c8c397ba900d47b15e377cafa63758a84e3d9a693753041e60e9bdaea260e8df7b12e8337ee41158cd33b6dce7db3912de5afe545e12548e5f48f05d6dbd
- TLSH T1FC7199FBB54A52C6BD329A9B2A6F50CE04801712136AD4F8E7D6EC01DF8CF8841787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1