General
- Target Termo de Adesao-JS8OKY.hta
- Size 3KB
- Sample260803-ncd8xaxvfs
- SHA256 71560c08879dc70e3d85e25f5bcdcceeac6ae76fae6ed7c4a683293b7823d18d
- MD5 22b2b9f00bc6881b85fa694ffafc6b89
- SHA1 0cbf7d478ab37670dc1b57739133f02047082629
- SHA512 513621f14bfe553e82e7898ba6fec274075ed0d8c54af9b1a79c7a310c70bf4db9b31db33fdf8d639f1fea62102779547af50063fc171477294790ac0d38d272
- TLSH T1FC5146F77A8283C6BC31899F6A2F209C24950B422766D0FCF697D801EF4DE4A44747E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-JS8OKY.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-JS8OKY.hta
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-JS8OKY.hta
- Size 3KB
- SHA256 71560c08879dc70e3d85e25f5bcdcceeac6ae76fae6ed7c4a683293b7823d18d
- MD5 22b2b9f00bc6881b85fa694ffafc6b89
- SHA1 0cbf7d478ab37670dc1b57739133f02047082629
- SHA512 513621f14bfe553e82e7898ba6fec274075ed0d8c54af9b1a79c7a310c70bf4db9b31db33fdf8d639f1fea62102779547af50063fc171477294790ac0d38d272
- TLSH T1FC5146F77A8283C6BC31899F6A2F209C24950B422766D0FCF697D801EF4DE4A44747E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1