General
- Target goodthingsarecomingfromthebestplacescomingforme.hta
- Size 13KB
- Sample260804-pc9v9aej91
- SHA256 3448f9c19e956d53f46bf3166707619e1b8516af8f800fac0f6b6987bc7961e0
- MD5 35de4e556cd85287e74b60c1ece9d678
- SHA1 a6b60ca0b4ca660c5c6142fe57ac6cb44af0a1de
- SHA512 839d0e3f0ce35c04c383c8e99a1e440de99b953e0bc6bef5fefe8ce640106036387001a0254c2f38daba30342820d0fa98bfcacecf23f962ed8c22d2cbf95b0e
- SSDEEP 48:3fxtTHx2M0T1zoefRuuuuuuLMRkwK2VuuoXBuuuuxAxoExL1VPyTlDxlG:ptlMKe3Qvm3E
- TLSH T160521E7E46D4FDDCA38B60ED40883A236445CD7BB05A0E1AB4CC9097B7A15BD1E3828D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
goodthingsarecomingfromthebestplacescomingforme.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target goodthingsarecomingfromthebestplacescomingforme.hta
- Size 13KB
- SHA256 3448f9c19e956d53f46bf3166707619e1b8516af8f800fac0f6b6987bc7961e0
- MD5 35de4e556cd85287e74b60c1ece9d678
- SHA1 a6b60ca0b4ca660c5c6142fe57ac6cb44af0a1de
- SHA512 839d0e3f0ce35c04c383c8e99a1e440de99b953e0bc6bef5fefe8ce640106036387001a0254c2f38daba30342820d0fa98bfcacecf23f962ed8c22d2cbf95b0e
- SSDEEP 48:3fxtTHx2M0T1zoefRuuuuuuLMRkwK2VuuoXBuuuuxAxoExL1VPyTlDxlG:ptlMKe3Qvm3E
- TLSH T160521E7E46D4FDDCA38B60ED40883A236445CD7BB05A0E1AB4CC9097B7A15BD1E3828D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.