General
- Target Termo de Adesao-NHVRNV.hta
- Size 2KB
- Sample260803-ngc7eawara
- SHA256 4c25df422c2ac4a56af842c648754ce3e56a375cf0246e4a5f20b8a2ff06c88e
- MD5 8c29f3926bb87f735f88ebf5d1fcbb31
- SHA1 745295a4068f115f1b088e1f923bb58e3dcc4520
- SHA512 89b0154108e41b14ea1f26bbc278c2c8b6f37da42f8d0323b0ba4183a4539cba6edbcd02fe104b5939574f41f7f05efa19df9854bb88a8808e073e1cf193974e
- TLSH T1CE51EEF77A5642C6BC32899B6A6F109E149017022366E0FCF397ED01DF8DE4949783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-NHVRNV.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-NHVRNV.hta
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-NHVRNV.hta
- Size 2KB
- SHA256 4c25df422c2ac4a56af842c648754ce3e56a375cf0246e4a5f20b8a2ff06c88e
- MD5 8c29f3926bb87f735f88ebf5d1fcbb31
- SHA1 745295a4068f115f1b088e1f923bb58e3dcc4520
- SHA512 89b0154108e41b14ea1f26bbc278c2c8b6f37da42f8d0323b0ba4183a4539cba6edbcd02fe104b5939574f41f7f05efa19df9854bb88a8808e073e1cf193974e
- TLSH T1CE51EEF77A5642C6BC32899B6A6F109E149017022366E0FCF397ED01DF8DE4949783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1