General
- Target extension-fix-VTKI0I.hta
- Size 3KB
- Sample260803-k49bksfl2y
- SHA256 ff9edb53902a3a56ea888832111cf619eff6d5aa4941e0c7e7ff66cd9f21537e
- MD5 9fb04914870232a8d2d7c1831441a059
- SHA1 983143d6ee44f3d2ca1995807ecd4a820fb09b91
- SHA512 5b2f630b9e09ed6d182a32bf89c482ab0bead9d3c1cbf92c29533270e55ccb0fea92e572e8c33da42cfd43e2dd104a305877646eec341ccb1c55232b8e9c58f2
- TLSH T1A361E1F7B98656D2BC329A9B1A2F408954941B021326D4BCF796EC419F99E0980787D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-VTKI0I.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-VTKI0I.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-VTKI0I.hta
- Size 3KB
- SHA256 ff9edb53902a3a56ea888832111cf619eff6d5aa4941e0c7e7ff66cd9f21537e
- MD5 9fb04914870232a8d2d7c1831441a059
- SHA1 983143d6ee44f3d2ca1995807ecd4a820fb09b91
- SHA512 5b2f630b9e09ed6d182a32bf89c482ab0bead9d3c1cbf92c29533270e55ccb0fea92e572e8c33da42cfd43e2dd104a305877646eec341ccb1c55232b8e9c58f2
- TLSH T1A361E1F7B98656D2BC329A9B1A2F408954941B021326D4BCF796EC419F99E0980787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1