General
- Target TradingView.msix-T46ZWD.zip
- Size 1KB
- Sample260803-qgd5tabp8s
- SHA256 642c87a1e31ee6e01311b3a558039cde33b9d837fb8ae1e146173c6f686da034
- MD5 f5fd68679441bc4998b3be954d0f4b21
- SHA1 c124b824bf7117d6b711c4aae021e8134fb31de0
- SHA512 5bf34ee6ef85cbd08f43892a4752e4417a3dbaa98513dff3b0d57a5bc37dd3f7d79e1e889264f236a39667730175f0451a9c9143ef51f8e334960fcc67254ac7
- TLSH T1BE21E710F287E38CCD15FBB285886FA8B4806A82C61C78EAB27618E03010579AB9D161
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
TradingView.msix-T46ZWD.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
TradingView.msix-T46ZWD.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target TradingView.msix-T46ZWD.hta
- Size 3KB
- SHA256 aa7bc5d2d1a2e0f8febbdf08a3a261a2a958da959f8536b217879c4eaceb275c
- MD5 656e8da89a35a0e9be9f580d8e5e1372
- SHA1 fe53bc7537320f7b8c55ccf8b0f02808f359c727
- SHA512 7d09206d481aabaca8d59414c2941a8059c2a5a1f16c534d830aab8f55f0c1296edad46f217cb96d4988292e04daa69e61f5f6325ec71534f4f704fe9aaede02
- TLSH T1786123FBB95652C2BC3298AB1A6F508E549417021326E0F8F6E6DC00EF89F5D45787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1