General
- Target Termo de Adesao-I62NLQ.hta
- Size 2KB
- Sample260803-nca69ahm2y
- SHA256 a100f07096462dca015b96515f84bd25e7da2b6145a5ed80738c7002f687a817
- MD5 d4abe9a664f5c005fd22769001fde96f
- SHA1 11d0bc8afce4833ee520be6dc3b415689c0c965a
- SHA512 cf7ebd2010c4782860b3459bc78471f2f2b77bda8f8d82af4fe2cee6cafd2eee50991a017fcd76a53d6fe4bb52d8fc8d4904cf649d83ee594c7e0cb9924bfa06
- TLSH T1515199E36F9257DA7C31589F6A6F105D28900A4623A5E0B8F297E801EF4CE9E89743D0
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-I62NLQ.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-I62NLQ.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-I62NLQ.hta
- Size 2KB
- SHA256 a100f07096462dca015b96515f84bd25e7da2b6145a5ed80738c7002f687a817
- MD5 d4abe9a664f5c005fd22769001fde96f
- SHA1 11d0bc8afce4833ee520be6dc3b415689c0c965a
- SHA512 cf7ebd2010c4782860b3459bc78471f2f2b77bda8f8d82af4fe2cee6cafd2eee50991a017fcd76a53d6fe4bb52d8fc8d4904cf649d83ee594c7e0cb9924bfa06
- TLSH T1515199E36F9257DA7C31589F6A6F105D28900A4623A5E0B8F297E801EF4CE9E89743D0
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.