General
- Target Termo de Adesao-17XFFU.hta
- Size 3KB
- Sample260803-nc4hssge85
- SHA256 640c975022c9116b3a679acb0f81d57fcd125d36127c15f154340d72c37d8724
- MD5 999c6b24eb2a33556ecc518b85f3a7b3
- SHA1 4b4558c5ee699f5f90b4e760661dbf65a9173794
- SHA512 5d9c5ffa954c7579e72d44182575302dde4945c71ba9c01f5cf05fe015e2e9b358ec55da91cdb745e56d3ba99b9d5badb95cbdbb608335fd38e870dfee173410
- TLSH T1835156FB7A4783C5BC32599B2A3F118954D42A431366E1B8F787DC01EF89E4981397E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-17XFFU.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-17XFFU.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-17XFFU.hta
- Size 3KB
- SHA256 640c975022c9116b3a679acb0f81d57fcd125d36127c15f154340d72c37d8724
- MD5 999c6b24eb2a33556ecc518b85f3a7b3
- SHA1 4b4558c5ee699f5f90b4e760661dbf65a9173794
- SHA512 5d9c5ffa954c7579e72d44182575302dde4945c71ba9c01f5cf05fe015e2e9b358ec55da91cdb745e56d3ba99b9d5badb95cbdbb608335fd38e870dfee173410
- TLSH T1835156FB7A4783C5BC32599B2A3F118954D42A431366E1B8F787DC01EF89E4981397E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.