General
- Target extension-fix-IHXCU3.hta
- Size 3KB
- Sample260803-k4djxasfre
- SHA256 23fa0aa4d12e9cab3681e720bfbe3bf63302c064dcbb755b93fd73905ffd0028
- MD5 07066c7e03f3b590c1e128965e8eaf13
- SHA1 e2c93d4ce82eb3ea7666652e760bb024d93531e0
- SHA512 3a992eea80bb4e019b73ae73511ec34e0af60d6a6a61e3fac30162c5e45a0e8c0ab2205cfea0b6e08261886279ba4522fa4d39f6300f17f1bb5f4e93dee4c71e
- TLSH T1BD6147FBB94656C6BC32899F2A2F508D14941B022366D4FCF3C6DD01AF98F4984783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-IHXCU3.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-IHXCU3.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-IHXCU3.hta
- Size 3KB
- SHA256 23fa0aa4d12e9cab3681e720bfbe3bf63302c064dcbb755b93fd73905ffd0028
- MD5 07066c7e03f3b590c1e128965e8eaf13
- SHA1 e2c93d4ce82eb3ea7666652e760bb024d93531e0
- SHA512 3a992eea80bb4e019b73ae73511ec34e0af60d6a6a61e3fac30162c5e45a0e8c0ab2205cfea0b6e08261886279ba4522fa4d39f6300f17f1bb5f4e93dee4c71e
- TLSH T1BD6147FBB94656C6BC32899F2A2F508D14941B022366D4FCF3C6DD01AF98F4984783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1