General
- Target DOC-EYW966.hta
- Size 2KB
- Sample260803-w96cnadh72
- SHA256 c71e74ac257bf17431ad8b7764c2164ba28b08c65684a077ed8028fd81af11ec
- MD5 eba57b29e54b68845f2f51488bf9bde7
- SHA1 1e5f4046507ef8b03ba05ff1598cbf932a20e3c2
- SHA512 bd4841e6941d4bacac456f0b161e8a1582783d561e7c7c72a514242bbe7f8c3f086ff48a7b3d09eb5f0fc000a0737d8790960daad9d7b90ce0452067fce9d319
- TLSH T17E5187F36A4A92C6BC329ADB1E6F509D109017065366E4F8E7E6EC01DF8DE5940783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EYW966.hta
Resource
win10v2004-20260513-en
8 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-EYW966.hta
Resource
win11ltsc2024-20260709-en
2 signatures
40 seconds
Malware Config
Targets
-
- Target DOC-EYW966.hta
- Size 2KB
- SHA256 c71e74ac257bf17431ad8b7764c2164ba28b08c65684a077ed8028fd81af11ec
- MD5 eba57b29e54b68845f2f51488bf9bde7
- SHA1 1e5f4046507ef8b03ba05ff1598cbf932a20e3c2
- SHA512 bd4841e6941d4bacac456f0b161e8a1582783d561e7c7c72a514242bbe7f8c3f086ff48a7b3d09eb5f0fc000a0737d8790960daad9d7b90ce0452067fce9d319
- TLSH T17E5187F36A4A92C6BC329ADB1E6F509D109017065366E4F8E7E6EC01DF8DE5940783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.