05721f01e73d16294e95e6862256ded639c7362ced012d0b1252e68335ada465

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 09:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file-BLHVOA.hta
Size 1KB
Sample260527-k8cs6sb151
SHA256 05721f01e73d16294e95e6862256ded639c7362ced012d0b1252e68335ada465
MD5 b80c854083d202d91949d2e3afe904ed
SHA1 21ffc0ee268641271e9eee94433484c95c2af2a3
SHA512 6bdf152520275a9cf03882544a90df11206e90e7be3ce53d47c54a61d9bcead48b9d81387fc4fd02e7428772c7089e27a2e0f2a9a1654ca23dc3fa6815720152
TLSH
T1F9217B456A6383C87DB12A64C27D9206B0D24217A4D0FD54F7DCE002BF25653EF0A2F1
MD5 SHA1 SHA512 TLSH

Score

8^/10

discovery

Malware Config

Signatures

Badlisted process makes network request 6 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	3984	mshta.exe
3	3984	mshta.exe
4	3984	mshta.exe
5	3984	mshta.exe
6	3984	mshta.exe
7	3984	mshta.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\file-BLHVOA.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
PID:3984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads