General
- Target Termo de Adesao-DHV76O.hta
- Size 2KB
- Sample260803-nl22bsgg36
- SHA256 85b50829adad176ee0f6357f6df032cac8c2c095d9cbaca15e455671aac3c499
- MD5 331c2057e970605680abf80d9445aaa8
- SHA1 882105c2c5a44a0cdb424448848469288d22c987
- SHA512 16ffaac34297659a3d06f4363d8fa115711b72b749e99ef6856d95e17bf09aedc7e9a4828384eda78b53159f34417cb45ce0c0434c4bfb4ee7953fc39cea1e1f
- TLSH T1395153FBFA8767D47CB215EF673FA08915F95A830259F470F582E800AF14B0A4018BE8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Termo de Adesao-DHV76O.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Termo de Adesao-DHV76O.hta
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Termo de Adesao-DHV76O.hta
- Size 2KB
- SHA256 85b50829adad176ee0f6357f6df032cac8c2c095d9cbaca15e455671aac3c499
- MD5 331c2057e970605680abf80d9445aaa8
- SHA1 882105c2c5a44a0cdb424448848469288d22c987
- SHA512 16ffaac34297659a3d06f4363d8fa115711b72b749e99ef6856d95e17bf09aedc7e9a4828384eda78b53159f34417cb45ce0c0434c4bfb4ee7953fc39cea1e1f
- TLSH T1395153FBFA8767D47CB215EF673FA08915F95A830259F470F582E800AF14B0A4018BE8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2