General
- Target file-DG289P.zip
- Size 1KB
- Sample260803-pxlddshf43
- SHA256 3c20684eebf4e3af82d6af3d0a47c59c80b4d7491d494ec95cf059c9c8365b86
- MD5 c242c2072d467d7559f22ec14efec757
- SHA1 701a83753574db5940a5bb3b69de8ec82e64a75b
- SHA512 23cf40ad9fbdfdb589766bf8b43d46098b0242f07e2938d050e95c7593ef6bd9baa97001e9e1cad7deef571f9b6a984ea9c5079599589f98f1c7a7ec809ed379
- TLSH T11921EAC4070B59D2D697D93399192174CCC2C4E709B05A23C1564D0F34260DB596EC0B
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
file-DG289P.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
file-DG289P.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target file-DG289P.hta
- Size 3KB
- SHA256 4829dde8aebd05fb157eb1968067c9c93f53f9a094749eb209f16aac8f065db5
- MD5 8550b052d6a24bef168da2e7910c344a
- SHA1 28e22315a7f6d9a26902419162d3d083d308c4f8
- SHA512 614e679be2c219ac298bd36bf48e9bd55a4d8572600fa08294bf3451cce3cad06a0871721a3a388bdaa1e686842d20eb5419bc865baa5122b7c9a78e6e7ec1e9
- TLSH T1D56112F7BA5A52D1BC32899B6A6F50DE049407061366E0FCF797DC00EF88E4984783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.