General
- Target Contrato_MP-1DZUSS.hta
- Size 3KB
- Sample260803-nc1f5svhqa
- SHA256 5ad6e1c96e5bae2db1eef6f3eb24f4ec8420cf7f98548c06ec9383974af8890c
- MD5 2742eacd05dff9ff6c63f113c285354d
- SHA1 943429fd5fd2aa705fa56b1e57f22849af277f29
- SHA512 d891bb7c0eea5de73bef774a568dc634eeb8acb459b4fa67623199db1eaa23e94333e992594dba0af6c8c11909554c4babdd8658f9626476987a1691b02666f1
- TLSH T1D161DFF7A95A42D6BC32999B5A6F50CD449407022366E0F8E397DC00EF8CF9D45B87C8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Contrato_MP-1DZUSS.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Contrato_MP-1DZUSS.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Contrato_MP-1DZUSS.hta
- Size 3KB
- SHA256 5ad6e1c96e5bae2db1eef6f3eb24f4ec8420cf7f98548c06ec9383974af8890c
- MD5 2742eacd05dff9ff6c63f113c285354d
- SHA1 943429fd5fd2aa705fa56b1e57f22849af277f29
- SHA512 d891bb7c0eea5de73bef774a568dc634eeb8acb459b4fa67623199db1eaa23e94333e992594dba0af6c8c11909554c4babdd8658f9626476987a1691b02666f1
- TLSH T1D161DFF7A95A42D6BC32999B5A6F50CD449407022366E0F8E397DC00EF8CF9D45B87C8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1