General
- Target Termo de Adesao-RTWT2B.hta
- Size 2KB
- Sample260803-necsvsgf49
- SHA256 c52cb078ca12e8deae0cb689afd08cd47b2a2bfb7971db571aee8ee0df9f15a5
- MD5 28cdcc12b88a2e1232c7fccbb9dedf08
- SHA1 58d41f93b828bd4a14dd17c4802f5d1d2d221450
- SHA512 8803ccb9292d495d4118a4f5c5a8c752de14846e882f2b163e8bb9294db0305780875587422ae828db29dbbac4dea10e08c66158dcc087a71160d793f208f58a
- TLSH T19B5176F7BA46A2C5BD3249DB2B2F508954A41A432326E0F8F79BDC00EF98E4954347D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-RTWT2B.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-RTWT2B.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-RTWT2B.hta
- Size 2KB
- SHA256 c52cb078ca12e8deae0cb689afd08cd47b2a2bfb7971db571aee8ee0df9f15a5
- MD5 28cdcc12b88a2e1232c7fccbb9dedf08
- SHA1 58d41f93b828bd4a14dd17c4802f5d1d2d221450
- SHA512 8803ccb9292d495d4118a4f5c5a8c752de14846e882f2b163e8bb9294db0305780875587422ae828db29dbbac4dea10e08c66158dcc087a71160d793f208f58a
- TLSH T19B5176F7BA46A2C5BD3249DB2B2F508954A41A432326E0F8F79BDC00EF98E4954347D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.