General
- Target givingbestthingsfromthebetterplacescomingforme.hta
- Size 206KB
- Sample260805-pj7pgaxdrf
- SHA256 f3eabd1a9c420c7a648fe86b38569eaeb555edcea6e0f62ba7a8e8aac4cc8b00
- MD5 40b52845611ac0d20a7a09fd9d5ca22b
- SHA1 775b5ecead009cd46f55bdaf80add02004a2ca47
- SHA512 b49baca30cbc9352e284ea16afa790b8faf4b84fa589f8a4f5737a36078d8fe5676034031edb9b5fbf0a5d9fffab467ab04f98bc776a1405aeb3b0121a31974a
- SSDEEP 3072:/fNuffCNJfNb/XTJFoN5bCfbbfDlbbNwQ/CVNNNbO9ffrSb25iNoJNFfgNNfbffn:c
- TLSH T17F24FD6313C6212FA4E031D68F4942DBFB75460E4E6A57793B9CB981AAD0CD820D6F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
givingbestthingsfromthebetterplacescomingforme.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target givingbestthingsfromthebetterplacescomingforme.hta
- Size 206KB
- SHA256 f3eabd1a9c420c7a648fe86b38569eaeb555edcea6e0f62ba7a8e8aac4cc8b00
- MD5 40b52845611ac0d20a7a09fd9d5ca22b
- SHA1 775b5ecead009cd46f55bdaf80add02004a2ca47
- SHA512 b49baca30cbc9352e284ea16afa790b8faf4b84fa589f8a4f5737a36078d8fe5676034031edb9b5fbf0a5d9fffab467ab04f98bc776a1405aeb3b0121a31974a
- SSDEEP 3072:/fNuffCNJfNb/XTJFoN5bCfbbfDlbbNwQ/CVNNNbO9ffrSb25iNoJNFfgNNfbffn:c
- TLSH T17F24FD6313C6212FA4E031D68F4942DBFB75460E4E6A57793B9CB981AAD0CD820D6F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of SetThreadContext