General
- Target extension-fix-4JQIWG.hta
- Size 3KB
- Sample260803-k63ltafl7y
- SHA256 b40f1e00df8189c6a01f3050a1c128f6d99f00595b489136fbbeb49b29d30998
- MD5 9e097fbcf1aa5fe50b71058e19f3beb7
- SHA1 ce6fd77fb376094621ccdebe821f6ce28dd95e64
- SHA512 146eec2306c9400f997cee5236fa2ecaef47f20f12d8a71f9e97f4c0676093687ca9611d3e9ac8e56889bfc929662af07d8d07b9a5334a50818ebc035a134f52
- TLSH T1AE61E9F7794A82C5BC32989B1A2F509E546417062366D4F8E3A7CC00EF8CF9984B87D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-4JQIWG.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-4JQIWG.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-4JQIWG.hta
- Size 3KB
- SHA256 b40f1e00df8189c6a01f3050a1c128f6d99f00595b489136fbbeb49b29d30998
- MD5 9e097fbcf1aa5fe50b71058e19f3beb7
- SHA1 ce6fd77fb376094621ccdebe821f6ce28dd95e64
- SHA512 146eec2306c9400f997cee5236fa2ecaef47f20f12d8a71f9e97f4c0676093687ca9611d3e9ac8e56889bfc929662af07d8d07b9a5334a50818ebc035a134f52
- TLSH T1AE61E9F7794A82C5BC32989B1A2F509E546417062366D4F8E3A7CC00EF8CF9984B87D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1