General
- Target Termo de Adesao-6YFD51.hta
- Size 2KB
- Sample260803-nebkssgf47
- SHA256 2b11c21528fd19657b222793f4e3780bef85c192ff05d1d509b9455b6a1aab29
- MD5 4ac247dc9a27bd329a615969bdc1abdc
- SHA1 8a3cef2abfb0f2e0bb382b74f55c55889c1b377c
- SHA512 a65373235eb686e1be51a330bb112c22c45bfe3bee347eb4ec2d37cc183058bdff20033e189835c666c66feb0ee6729e9466b25878a400d1c9b0fa524de00d1e
- TLSH T1F15135F7B94662C5BD328A9B2A2F10CD145417022762E4FCF396DC41DF8DE5A80787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-6YFD51.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-6YFD51.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-6YFD51.hta
- Size 2KB
- SHA256 2b11c21528fd19657b222793f4e3780bef85c192ff05d1d509b9455b6a1aab29
- MD5 4ac247dc9a27bd329a615969bdc1abdc
- SHA1 8a3cef2abfb0f2e0bb382b74f55c55889c1b377c
- SHA512 a65373235eb686e1be51a330bb112c22c45bfe3bee347eb4ec2d37cc183058bdff20033e189835c666c66feb0ee6729e9466b25878a400d1c9b0fa524de00d1e
- TLSH T1F15135F7B94662C5BD328A9B2A2F10CD145417022762E4FCF396DC41DF8DE5A80787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.