General
- Target Contrato_MP-BL3ZSQ.hta
- Size 2KB
- Sample260803-nfxveswapb
- SHA256 b67ad46b0197fed24fe218eb4c4436e0a6579bd58ba74c8490d711fb06f3cf30
- MD5 df81032a4173d10741013f7343179216
- SHA1 c87193ff0786fbe7bf6286d28386f68456e44187
- SHA512 8fdcd501d69871c5b5ebfcf83a4cd5a9b4b4e380ddabf147aa44c086a657e45011531cbbe2c33014e766d39beb10d360171b6d8db2dd4bb4cc9ae4e988ae7578
- TLSH T1CC5198F7BA8617C6BC32499F6B2F508C15D41A432365D0B8F296DC00AF8CF4984747E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Contrato_MP-BL3ZSQ.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Contrato_MP-BL3ZSQ.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Contrato_MP-BL3ZSQ.hta
- Size 2KB
- SHA256 b67ad46b0197fed24fe218eb4c4436e0a6579bd58ba74c8490d711fb06f3cf30
- MD5 df81032a4173d10741013f7343179216
- SHA1 c87193ff0786fbe7bf6286d28386f68456e44187
- SHA512 8fdcd501d69871c5b5ebfcf83a4cd5a9b4b4e380ddabf147aa44c086a657e45011531cbbe2c33014e766d39beb10d360171b6d8db2dd4bb4cc9ae4e988ae7578
- TLSH T1CC5198F7BA8617C6BC32499F6B2F508C15D41A432365D0B8F296DC00AF8CF4984747E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.