General
- Target extension-fix-HZXHOD.hta
- Size 2KB
- Sample260803-k73cfashjg
- SHA256 a06707da5ad2ad380b04657f9fef6902b8f88fe42cfa54194bb3dd07685227a0
- MD5 742184fbf8856813332a340ad366ac94
- SHA1 49cb44b87455996c4b531252e8ab51f96da128a1
- SHA512 f29e3deb2e991c3b2bb4a8152359adeaef7dd6ea95c25a29514f84ba4f8f5331fdf7cf25f1b7f661b51f4f8453de2c050684a450e58ae0e98ea413268c91567d
- TLSH T14C5179F7BA4516D5BD314A9B2A6F90CD18E416432366E0F8F6E6DC00AF88E4D45B83D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-HZXHOD.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-HZXHOD.hta
- Size 2KB
- SHA256 a06707da5ad2ad380b04657f9fef6902b8f88fe42cfa54194bb3dd07685227a0
- MD5 742184fbf8856813332a340ad366ac94
- SHA1 49cb44b87455996c4b531252e8ab51f96da128a1
- SHA512 f29e3deb2e991c3b2bb4a8152359adeaef7dd6ea95c25a29514f84ba4f8f5331fdf7cf25f1b7f661b51f4f8453de2c050684a450e58ae0e98ea413268c91567d
- TLSH T14C5179F7BA4516D5BD314A9B2A6F90CD18E416432366E0F8F6E6DC00AF88E4D45B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2