General
- Target extension-fix-C5VNPU.hta
- Size 3KB
- Sample260803-k13pmasflg
- SHA256 92d116183319a32178bd30bef89effb19090886437eb810ddba31ff1ac8d4c77
- MD5 d8e998a8f5dfbe852a60c289318cc0ab
- SHA1 4a30493e1dbfbcb1efd940b2df688ea338b54792
- SHA512 6d711b2f757f772796ee8e3353eb0f2884dcc8e75658e96ff258939d0f05fc36228c4a6e5779e86d00fc5bb72b97729dce941fdadfdc4db609e8a25b3e8f82f6
- TLSH T11C6133F76A8243C6BC3289AB6A2F608D54940A422362D4FCF797DC01EF8DF5948787D4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-C5VNPU.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-C5VNPU.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-C5VNPU.hta
- Size 3KB
- SHA256 92d116183319a32178bd30bef89effb19090886437eb810ddba31ff1ac8d4c77
- MD5 d8e998a8f5dfbe852a60c289318cc0ab
- SHA1 4a30493e1dbfbcb1efd940b2df688ea338b54792
- SHA512 6d711b2f757f772796ee8e3353eb0f2884dcc8e75658e96ff258939d0f05fc36228c4a6e5779e86d00fc5bb72b97729dce941fdadfdc4db609e8a25b3e8f82f6
- TLSH T11C6133F76A8243C6BC3289AB6A2F608D54940A422362D4FCF797DC01EF8DF5948787D4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1