General
- Target TradingView.msix-69KE34.zip
- Size 1KB
- Sample260803-qgvskaaa93
- SHA256 4dbb44e9b731e5b6dd014415d64a6b4d2362f3fe9ec06d69c6544ee67804f631
- MD5 941801f327c0de710c1f0a1b5a4ec1e4
- SHA1 3b2558a5fb00d91fcfbde3d2fcc073893f6a576c
- SHA512 ba36631b24ac6d09852ab2297d19ddf68ba70c1a233df67d65bf8208863cbfa20ee96ce54115a80abf7c1a29e6d356826aaca82078fcefcf4ca4fa22689dbe4c
- TLSH T1CC21E73FF282296BC14C3C79254177315808074102CEAB5B2C7A6D2927C608FDE85459
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
TradingView.msix-69KE34.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
TradingView.msix-69KE34.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target TradingView.msix-69KE34.hta
- Size 2KB
- SHA256 2d6b91556b35d88b6b552d506f674115f8855c25c6d98f0721a184866908b039
- MD5 5e6df22c5c1858c0bc59375ce36596ad
- SHA1 202c88ca54a62948b604a77a9f14cc544f8c0c1c
- SHA512 ac886c1c67aab4ee54ee73a57e32537a147435947ce07e018ec062c077095e286c951f63ac29db113d8a91d10df573373a3c6fb312eb6f20ef48baac37f47325
- TLSH T1235125F77A4553C2BD31499B1A6F509924940A4223A6D0FCFAD7EC00EF8CE8D89B47D4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.