General
- Target Scan_IMG00821800.zip
- Size 873B
- Sample260910-ak3dtaed42
- SHA256 1514fb26479a333d94a0bf5dba23d29726ef7cc9136676bd4b71144807d42f33
- MD5 aafea9413d91b27550baa4967410c022
- SHA1 391623ee5625a3f2c17c4f21160ac0f29cfc2a28
- SHA512 507aee622edc4f09d40a996d6b1ca87fd197f099482e999a98e61bc40278eb4297f2b77ebb14f21a1c8a5369204866b56e84aac17ef4878451ff8c612fbaaec8
- TLSH T185116303403A1536DFCAA4B288F26D4512707E15E87905D38B7CDD6232A55C9010FC83
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Scan_IMG00821800.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Scan_IMG00821800.hta
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Scan_IMG00821800.hta
- Size 1KB
- SHA256 58cffa9bf72828287ec79a44d84d9624908e5d4b2484e40ed15e00adaaf4a940
- MD5 a0064fb6c8147077638de6c8aa089ca2
- SHA1 58286d0cda3a8eaf12bc0eb9c39e775df743bf4a
- SHA512 83a49afc9b8fa2e981277347c00feb5d430d176298fe212d89629302695b1d6147bf8b10360a2d9440f89b7548601bf0e05b75012bf6df9fdd04943b2948a781
- TLSH T1CB41AD13A904959833711BAB1997C20DF1DEB2E340629870765E843A0F717CFB4F857A
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes a VBScript file via the Windows Script Host.