General

  • Target
    Termo de Adesao-WFM0CF.zip
  • Size 1KB
  • Sample260801-phhnysad87
  • SHA256 5cb91b96f185942d9cb42d452de1469318dc404e1fcfbec17a08eea5d286c9ff
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      Termo de Adesao-WFM0CF.hta
    • Size 3KB
    • SHA256 6fdfa59e6e6cc23453a3c01254489b3cb0b06d12219e16ea4162638902ca485c
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks