General
- Target Termo de Adesao-OA6TSS.hta
- Size 3KB
- Sample260803-nd3ynahn3v
- SHA256 b8e5be821eb36addf9f29d5aaae8531c482fda24f6ee471da4bc95b604eed59a
- MD5 93f7755db34a12ced647b5a43ea19c0f
- SHA1 24e9ff8e04b06a2647cae8a1fe7c83864e1f154c
- SHA512 ee1869c9d2abf8cb8bfe8c93367a6e5c2d24fa7769b0d79abb2f54a3a33e982758bcb0050ed2f2b3c9a1e516b261b3b9e1e1cff013335aa7f075c5e9f27a750d
- TLSH T16A6103F7B94652D6BD368AAB5A6F508D148416021366D5FCF3DADC009F98F0A40793E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-OA6TSS.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-OA6TSS.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-OA6TSS.hta
- Size 3KB
- SHA256 b8e5be821eb36addf9f29d5aaae8531c482fda24f6ee471da4bc95b604eed59a
- MD5 93f7755db34a12ced647b5a43ea19c0f
- SHA1 24e9ff8e04b06a2647cae8a1fe7c83864e1f154c
- SHA512 ee1869c9d2abf8cb8bfe8c93367a6e5c2d24fa7769b0d79abb2f54a3a33e982758bcb0050ed2f2b3c9a1e516b261b3b9e1e1cff013335aa7f075c5e9f27a750d
- TLSH T16A6103F7B94652D6BD368AAB5A6F508D148416021366D5FCF3DADC009F98F0A40793E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1