General
- Target estabilishedconnectionforbestthingcomeback.hta
- Size 21KB
- Sample260814-ag5d1a1drb
- SHA256 6ec9211b68b21b181c4bb33bd4040750f8c431cc8d46128e0c6bf97982d5c2b0
- MD5 8d9192b3dd9f1acd08a2f7de0419accc
- SHA1 7f808cb3a2febf217ffcb3903d7ec9c1a47e9b30
- SHA512 137fa1c055f493d44ac020bbdc0474419f6de2c0408b8892ab7193346d997ca854e2752f3174cf0ae312efdc90f1ec6152c6a1b8d140094e62acf611fd626400
- SSDEEP 96:MTpeyO2PfG1z8VfwBGcaPtaV51OWfXAeKU2PN4ukAYfY6uAsf6uAdYMgF/FWjpNe:kpCx5jtmVjsieM
- TLSH T1B2A28751CA9A20D2C93320B1A9AB5D00EBF2211DD3655DD86F9EB3EA9F504048B5CEF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
estabilishedconnectionforbestthingcomeback.hta
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target estabilishedconnectionforbestthingcomeback.hta
- Size 21KB
- SHA256 6ec9211b68b21b181c4bb33bd4040750f8c431cc8d46128e0c6bf97982d5c2b0
- MD5 8d9192b3dd9f1acd08a2f7de0419accc
- SHA1 7f808cb3a2febf217ffcb3903d7ec9c1a47e9b30
- SHA512 137fa1c055f493d44ac020bbdc0474419f6de2c0408b8892ab7193346d997ca854e2752f3174cf0ae312efdc90f1ec6152c6a1b8d140094e62acf611fd626400
- SSDEEP 96:MTpeyO2PfG1z8VfwBGcaPtaV51OWfXAeKU2PN4ukAYfY6uAsf6uAdYMgF/FWjpNe:kpCx5jtmVjsieM
- TLSH T1B2A28751CA9A20D2C93320B1A9AB5D00EBF2211DD3655DD86F9EB3EA9F504048B5CEF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.