General
- Target extension-fix-2VRXJH.hta
- Size 3KB
- Sample260803-k8bk4sshmc
- SHA256 7a2d2ce5999e873ae29a1b5ae76238dd47b636b9404744999475ea66b2ad8693
- MD5 70984850654ab0fb56cbc61f014de3c3
- SHA1 d9957cf347746e6c2ac0d7272285ae7087049985
- SHA512 dff8904ce2b31520c2782ed1b839d993661e38f14447601b5222246a04e9a5d78a5cc525d9d5218421021b76a440efad3add8515a523184757f792e7c7b45147
- TLSH T14B618FFB7A8397C4BC72499F5B3F908914D82A031365D4B8F68BDC40AF58E4980357E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-2VRXJH.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-2VRXJH.hta
- Size 3KB
- SHA256 7a2d2ce5999e873ae29a1b5ae76238dd47b636b9404744999475ea66b2ad8693
- MD5 70984850654ab0fb56cbc61f014de3c3
- SHA1 d9957cf347746e6c2ac0d7272285ae7087049985
- SHA512 dff8904ce2b31520c2782ed1b839d993661e38f14447601b5222246a04e9a5d78a5cc525d9d5218421021b76a440efad3add8515a523184757f792e7c7b45147
- TLSH T14B618FFB7A8397C4BC72499F5B3F908914D82A031365D4B8F68BDC40AF58E4980357E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2