General
- Target extension-fix-7LX80Y.hta
- Size 2KB
- Sample260803-k2a11afb45
- SHA256 ea1b5b70c829e50f9bcf90b2bb67ac09b624a0317adebd202b0b3491dd03ed38
- MD5 ada854e7498ade4564ee26009add5412
- SHA1 c8fa713e3825472ca6abd208328dced7d8cffe8b
- SHA512 95bdce18ced2b97cbf8bd004175d3f1b25c50f707b4c86f3f2d460765c1d0956fa4f8fd6e6c03882a85536635a426ee662ba73d3595df0daaa01057d803915b6
- TLSH T18A5165FBBA8652D6BC31499B1A2F508D14901A422366E0FCF696DD40EF88E9D94343D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-7LX80Y.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-7LX80Y.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-7LX80Y.hta
- Size 2KB
- SHA256 ea1b5b70c829e50f9bcf90b2bb67ac09b624a0317adebd202b0b3491dd03ed38
- MD5 ada854e7498ade4564ee26009add5412
- SHA1 c8fa713e3825472ca6abd208328dced7d8cffe8b
- SHA512 95bdce18ced2b97cbf8bd004175d3f1b25c50f707b4c86f3f2d460765c1d0956fa4f8fd6e6c03882a85536635a426ee662ba73d3595df0daaa01057d803915b6
- TLSH T18A5165FBBA8652D6BC31499B1A2F508D14901A422366E0FCF696DD40EF88E9D94343D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1