General
- Target Termo de Adesao-U2XQO4.hta
- Size 3KB
- Sample260803-nf8a6ahp2x
- SHA256 a9965694cc47733b482af61b0c41b05aedf9b359f92afa3c003d1123cbfa901a
- MD5 2c13090b51cfbea4b0ec5c4bcb4304e7
- SHA1 55d91b75d330c1831e8194ac75cfa548f85e3ffc
- SHA512 d91b0cf06dbb4da1874a865f28fc86c06dcd130160982e8f47a274294d2aebc0b7b6e09ffbe4a48f05f1a5cf8519e8504a3976b01612f063ffefc6dcbeacdd10
- TLSH T1716178F7794656D67D32899B2A2F608D14950B0323A6D0F8F286DC00EF8CE5944747E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-U2XQO4.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-U2XQO4.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-U2XQO4.hta
- Size 3KB
- SHA256 a9965694cc47733b482af61b0c41b05aedf9b359f92afa3c003d1123cbfa901a
- MD5 2c13090b51cfbea4b0ec5c4bcb4304e7
- SHA1 55d91b75d330c1831e8194ac75cfa548f85e3ffc
- SHA512 d91b0cf06dbb4da1874a865f28fc86c06dcd130160982e8f47a274294d2aebc0b7b6e09ffbe4a48f05f1a5cf8519e8504a3976b01612f063ffefc6dcbeacdd10
- TLSH T1716178F7794656D67D32899B2A2F608D14950B0323A6D0F8F286DC00EF8CE5944747E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2