General
- Target TradingView.msix-MCJOBO.zip
- Size 1KB
- Sample260803-qgqtlsaa87
- SHA256 ba0ff95ec7bb0fe3e5b44f364fc6cac6bf43d35fa24d50627468f17a6c01c93e
- MD5 3c0b1b5da302406df12676fa40d26ce2
- SHA1 eb2bc22a844c2abe03d48e0c393c45739f581bf4
- SHA512 035140020090f6b90ffe82d3d345e3ad8095c9d503e59a556617a25f7649ceaf57ebc98b96f91aee6a6c0a16d6992d1f29c8cd6a9b76482f1e16ec14bf835db2
- TLSH T17721777F6C475B4AF762FCF034645E9D6412890FC807EE636B249C972C046228F7609B
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
TradingView.msix-MCJOBO.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
TradingView.msix-MCJOBO.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target TradingView.msix-MCJOBO.hta
- Size 2KB
- SHA256 05583ad30633ee1cf9209018985aaf99810e277c65dd55093405664836eec2bd
- MD5 6d58d7272dfa7ecdd0dc097604fd69bf
- SHA1 c79d5cbf8a85d7622aab50dd8f424cf2ee7ebf51
- SHA512 233229bd07c20f34349b19a14144f88348dd8be5b3151866e71297e0a21713578630d1012bc1396df37240ce44e9e6625faf4782a952f818c9afb9e08cf25169
- TLSH T13451E2F7BA4692C6BC3299976A2F10C9149417421366D0FCF7D7DC419F8CE5944783A8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.