General
- Target Contrato_MP-S35YH8.hta
- Size 2KB
- Sample260803-nddnrsge98
- SHA256 b7f34b5e47383f369c14c55ddf26f755f1cac293f53b4b150e9b89a9162c4afd
- MD5 0971418111e4fd73f54dd2b4a3bcc425
- SHA1 b01965a0dfe16549524f1dcbd41b404de50c26fb
- SHA512 7f6d4e91b8fbcd178c013c1656c67b45bd7154b6aa1a7d3ba3a02a69e715b64ce3d4d41e1ac8565329756fff1f5c3adc35d92c706dbed2c9fd21001ec115f196
- TLSH T14B5177E7BA4252D6BC32499F2A6F518D50941B471366E4B8F29ACC00AF9CF4D81787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Contrato_MP-S35YH8.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Contrato_MP-S35YH8.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Contrato_MP-S35YH8.hta
- Size 2KB
- SHA256 b7f34b5e47383f369c14c55ddf26f755f1cac293f53b4b150e9b89a9162c4afd
- MD5 0971418111e4fd73f54dd2b4a3bcc425
- SHA1 b01965a0dfe16549524f1dcbd41b404de50c26fb
- SHA512 7f6d4e91b8fbcd178c013c1656c67b45bd7154b6aa1a7d3ba3a02a69e715b64ce3d4d41e1ac8565329756fff1f5c3adc35d92c706dbed2c9fd21001ec115f196
- TLSH T14B5177E7BA4252D6BC32499F2A6F518D50941B471366E4B8F29ACC00AF9CF4D81787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1