General
- Target Chrome_Atualizar--ZE4BYP.zip
- Size 1KB
- Sample260803-qfrdrayhkh
- SHA256 4280b8baed374f5982ca516e53bfb5dd10e226c29670dcee75a161ec43f78d1e
- MD5 a89c0a93e03526735ad15472574a86e7
- SHA1 5ff9591ee95fcb4a6ab881bec51b802281262d94
- SHA512 139c34dca25d47286f63813edbb9100150a5287a2ea76bcf686d7844f29d02068967f652946ac57f1961b7f2450002045a9fda5502e47c1731b4120e1f5e6955
- TLSH T10B21BA00D1E26AD1D82E54323C96F0D51B95C85D988DF19F09B716A0DDD30CA1EFBE85
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Chrome_Atualizar--ZE4BYP.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chrome_Atualizar--ZE4BYP.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Chrome_Atualizar--ZE4BYP.hta
- Size 2KB
- SHA256 ad6475592d80da7560b39a824225edf8d9a063ab015b7e60a996b8819ceec0ea
- MD5 5e74da32a950efe0f0b1bdb8211c0717
- SHA1 7121fb43c40690564051567803f945c5f6fb67cc
- SHA512 34382dc52ccb9a0fa53e24897db1ca7c86cde1043e22211881b705088f5af76105f0cbea6e5efec1bbc5e402105746cb23487d86651bfcde36d7f4f3e0ac1ec2
- TLSH T1A95123F3BA4542D5BD32899B2A2F108D589506022366D4FCE2E7DC00EFCDE5D85B43D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2