General
- Target extension-fix-U6A042.hta
- Size 2KB
- Sample260803-k66y8sfc22
- SHA256 0fa4b3f59488efad6aa738ba155d8288edf595ed5d09acac3cc4de091c0e1071
- MD5 c8919e89016a67047fe26dae2b3359cb
- SHA1 0c376726f28302977ff5d1d447ee64a8fe32d4b1
- SHA512 8089479c2ff2b38e7542bde521b8fd8287de099904c4f4f8e1d3e0e5ea48748a7cd0a96614f85f4ed79a4da0c27fe5bc6171425960c452b9e3a9ef2bb0655065
- TLSH T1BA5187F7BA0A57D5BC325AEB1A6F109954901A032365E0F8F6D7DC00AF88F4E81783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-U6A042.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-U6A042.hta
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-U6A042.hta
- Size 2KB
- SHA256 0fa4b3f59488efad6aa738ba155d8288edf595ed5d09acac3cc4de091c0e1071
- MD5 c8919e89016a67047fe26dae2b3359cb
- SHA1 0c376726f28302977ff5d1d447ee64a8fe32d4b1
- SHA512 8089479c2ff2b38e7542bde521b8fd8287de099904c4f4f8e1d3e0e5ea48748a7cd0a96614f85f4ed79a4da0c27fe5bc6171425960c452b9e3a9ef2bb0655065
- TLSH T1BA5187F7BA0A57D5BC325AEB1A6F109954901A032365E0F8F6D7DC00AF88F4E81783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2