General
- Target Termo de Adesao-KCTRV1.hta
- Size 3KB
- Sample260803-nblllahl6y
- SHA256 db0a94f711ac01dbd4f502df3c45438d060577a03cb0205d7591530a2c8785e0
- MD5 f948a88809c39b8f0f30baa2836a012f
- SHA1 fc19136e727a96b03e47a54e3d28bbcf4b1439a8
- SHA512 dcd660e6d5f06c213c7ef690387ee7b8e4ab7fd6b40788322cbb8fbaaa31a50d1297443425b83d80894dbe3e6555582817a2792d5ea0ecd40c7445eb26900fb4
- TLSH T14861B9F3754A52D6BC3299AB1A6F44CE449017026366E0FCF397DC01EF99F894278398
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-KCTRV1.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-KCTRV1.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-KCTRV1.hta
- Size 3KB
- SHA256 db0a94f711ac01dbd4f502df3c45438d060577a03cb0205d7591530a2c8785e0
- MD5 f948a88809c39b8f0f30baa2836a012f
- SHA1 fc19136e727a96b03e47a54e3d28bbcf4b1439a8
- SHA512 dcd660e6d5f06c213c7ef690387ee7b8e4ab7fd6b40788322cbb8fbaaa31a50d1297443425b83d80894dbe3e6555582817a2792d5ea0ecd40c7445eb26900fb4
- TLSH T14861B9F3754A52D6BC3299AB1A6F44CE449017026366E0FCF397DC01EF99F894278398
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.