General
- Target Contrato_MP-LD3Z8Q.hta
- Size 3KB
- Sample260803-ncbssavhnd
- SHA256 45b5652c1a2d919d61e30e3795b56370bac7e5dc68dc5b14d59241b5e12db881
- MD5 6728eef5d35f6a09c7f8c5260647f9ba
- SHA1 244397a079b02c2e045245af1f55fdb5832621f6
- SHA512 dd774f74b33c5884c7a33c5af78c6ac1291ba5617c40b6f39ba9be3000bfd4d6d073e477752417fe04b588d6c5dee36638a68e0bc92570abba48f1ebcd7d41a4
- TLSH T18A5132F7BA4252C6BC32899B6A6F608A148417021366E0FCF6DBEC01EF88F4945347D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Contrato_MP-LD3Z8Q.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Contrato_MP-LD3Z8Q.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Contrato_MP-LD3Z8Q.hta
- Size 3KB
- SHA256 45b5652c1a2d919d61e30e3795b56370bac7e5dc68dc5b14d59241b5e12db881
- MD5 6728eef5d35f6a09c7f8c5260647f9ba
- SHA1 244397a079b02c2e045245af1f55fdb5832621f6
- SHA512 dd774f74b33c5884c7a33c5af78c6ac1291ba5617c40b6f39ba9be3000bfd4d6d073e477752417fe04b588d6c5dee36638a68e0bc92570abba48f1ebcd7d41a4
- TLSH T18A5132F7BA4252C6BC32899B6A6F608A148417021366E0FCF6DBEC01EF88F4945347D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1