General
- Target Termo de Adesao-PDMZPP.hta
- Size 2KB
- Sample260803-nb99yshm2w
- SHA256 6750a07cb7644a7268f1bd4bb8838d391f76300caa409ace277ca5c7ae28ec6c
- MD5 a843efaa994ad0067b3955f252097d6e
- SHA1 e9d8815d361f6f3309c48800b94220b87f355cd7
- SHA512 1907f3a2d2dfbcfa7e980a871bc4ba70372471e564dfc81bcf996a64c9ffec4b35090e0d0a96763bb96d56d0f2c1234ea0bae9d4dd3b3a76cb949bca8abd94c2
- TLSH T14F5175EBB94A42D9BD329ADB5B2F50CD14901B032369D0B8F697DD00AF88F4A85343D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-PDMZPP.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-PDMZPP.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-PDMZPP.hta
- Size 2KB
- SHA256 6750a07cb7644a7268f1bd4bb8838d391f76300caa409ace277ca5c7ae28ec6c
- MD5 a843efaa994ad0067b3955f252097d6e
- SHA1 e9d8815d361f6f3309c48800b94220b87f355cd7
- SHA512 1907f3a2d2dfbcfa7e980a871bc4ba70372471e564dfc81bcf996a64c9ffec4b35090e0d0a96763bb96d56d0f2c1234ea0bae9d4dd3b3a76cb949bca8abd94c2
- TLSH T14F5175EBB94A42D9BD329ADB5B2F50CD14901B032369D0B8F697DD00AF88F4A85343D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.