Analysis
- max time kernel
148s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 11:16
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-LZLO7X.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-LZLO7X.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Termo de Adesao-LZLO7X.hta
- Size 3KB
- Sample260803-ndb5yahm71
- SHA256 60c88c2340c7dadd10d8c5da8e15e5e3d1b4b00298065be0f843f2cfc6ce4ff6
- MD5 45fe647efcb286ba4b8dbbbb4fdafd15
- SHA1 a887faa22dd32c76998248bf5d335b1653d45730
- SHA512 1bc1fc128087e766fc741b262d99ae4f0d254386069fb48413cb44e939ebce7318334a974267d5619b336eefdcd3ecad80463205aa443838ee570752c6168787
- TLSH T18751ABE77A8253C67C32699B6B6F50CC14981A4213A6E5F8F687D800EF5CE4E85783D0
- MD5 SHA1 SHA512 TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 4 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 4 916 mshta.exe 8 916 mshta.exe 10 916 mshta.exe 12 916 mshta.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mshta.exe
Processes
-
C:\Windows\SysWOW64\mshta.exeC:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\Termo de Adesao-LZLO7X.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
PID:916