General
- Target melvetrakingsbestformebestthignscomingfrom.hta
- Size 13KB
- Sample260811-pqkhhsed45
- SHA256 c3f1210473d2fec5851fec6b44d8a43063d462a99cb701308ad69c124a163cbf
- MD5 e26aa00839014bc5aafee69c4ea140c5
- SHA1 cbf9f681364e61972cd539915733b9c05a485321
- SHA512 f10d62c30a24791f5a9b75082099da0c06f50d3b27f16e82379c0158af21c3b726fdc2ed7fd53a18f607660fb785c4237783454a0d238b9455962c28b8d33421
- SSDEEP 48:3jYWhIjIyYWhp0jIP4Suuue8Oouuuuude5uuuu80muuuuuuuDvoYW8iYWJ9V1p5y:TY0ILY0aYNUwY+YuthY0H+
- TLSH T18D52AD7C2B98F9C4A1AB91E892D6710378D5C87FB10C5E16FCAD0527EBE046E0C3859E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
melvetrakingsbestformebestthignscomingfrom.hta
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target melvetrakingsbestformebestthignscomingfrom.hta
- Size 13KB
- SHA256 c3f1210473d2fec5851fec6b44d8a43063d462a99cb701308ad69c124a163cbf
- MD5 e26aa00839014bc5aafee69c4ea140c5
- SHA1 cbf9f681364e61972cd539915733b9c05a485321
- SHA512 f10d62c30a24791f5a9b75082099da0c06f50d3b27f16e82379c0158af21c3b726fdc2ed7fd53a18f607660fb785c4237783454a0d238b9455962c28b8d33421
- SSDEEP 48:3jYWhIjIyYWhp0jIP4Suuue8Oouuuuude5uuuu80muuuuuuuDvoYW8iYWJ9V1p5y:TY0ILY0aYNUwY+YuthY0H+
- TLSH T18D52AD7C2B98F9C4A1AB91E892D6710378D5C87FB10C5E16FCAD0527EBE046E0C3859E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger