General
- Target file-6LRWRE.zip
- Size 1KB
- Sample260803-pxlddshf42
- SHA256 c8279a25bc5eee48efd5f84691b6a2fd3aee6223a8e3d3368920d5ccb96ca0ea
- MD5 7b9517fb7505b3714f390370d56a6c87
- SHA1 0cb543779aa6121a2f488dfa794b9e12b5eb1ca1
- SHA512 6c38d27e89bf07d74f38612fecfc2b20ae2bd1e5d5e7b52ce8919db090c2c7d080621b519cdee241563f2c48330c12b38d6840e67401a7d52ea68ef90581cdb2
- TLSH T14B21FBB18D0B1805E2B34FB29BF7D661B534E74F1DB17C40CB28124519B43AD97E6838
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
file-6LRWRE.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file-6LRWRE.hta
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target file-6LRWRE.hta
- Size 2KB
- SHA256 01393c4acba12e4eba28220c56938e313e181ba4aa915b0840bdc4feaf3fc49e
- MD5 8cd7f34a421505bd360a8255d67ee137
- SHA1 536cde4b1575d6783eea89a061898149a3ec2a38
- SHA512 207c9e5881c65b1175c87b1d6a62b17c005659e0ef5489f27b733e425b6e2009fac0043086797155a4f239f2c1e4718486f1c5534ec862b9fe0d18654cf862dd
- TLSH T18151C0E7B94652D97C324A9B2B3F908D10E51A432364F5F4F642DC00EF89E5981787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.