General
- Target extension-fix-6JNI8X.hta
- Size 2KB
- Sample260803-k2lgqsfb46
- SHA256 0d7e3808c7b7c50274e41f55d4607b5e5b4c8daad91c2ff088218ab2b9942f3b
- MD5 50ec130bf51a35ce223ab4a5c77f92b2
- SHA1 20c4e253e3f30bd2e833b30a33839ae4adfd99fd
- SHA512 312d71ce85f7dfec55e1d26f00fd328e939f326c60ebe7d7a6c3235e3af69f81e4392fed2a06b2026c5f5ea4a336afaa52d1e0942cda71d7a6d98a0ff8f5bfbc
- TLSH T18F5143FBB98652D1BC32499B2E6F518D58941A422362E0BCFB87DC01EF98F4A40797D4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-6JNI8X.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-6JNI8X.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-6JNI8X.hta
- Size 2KB
- SHA256 0d7e3808c7b7c50274e41f55d4607b5e5b4c8daad91c2ff088218ab2b9942f3b
- MD5 50ec130bf51a35ce223ab4a5c77f92b2
- SHA1 20c4e253e3f30bd2e833b30a33839ae4adfd99fd
- SHA512 312d71ce85f7dfec55e1d26f00fd328e939f326c60ebe7d7a6c3235e3af69f81e4392fed2a06b2026c5f5ea4a336afaa52d1e0942cda71d7a6d98a0ff8f5bfbc
- TLSH T18F5143FBB98652D1BC32499B2E6F518D58941A422362E0BCFB87DC01EF98F4A40797D4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1