General
- Target extension-fix-GG78YK.hta
- Size 2KB
- Sample260803-k9bbqsfm71
- SHA256 a78ef7fe1da5169e5c1a33f44653555ecaba276e83cd547e5663113a2df40817
- MD5 825be5776723f3d2dee09928f9383e85
- SHA1 6a7b29cc64a82f52189eae9d84635e5b06829561
- SHA512 6ad17ece490baf52ad55520f9b9549905c5b130854e756426147bf4ff289033498eb08d563245a0143e08955b1cf0f6a3c16f3b3fa5259f4fe1f52a42a20c0de
- TLSH T1035153FBBA8663C5BD32599F5A6F518D14A41A422326E0B8F6C7CC41EF8CE4984743D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-GG78YK.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-GG78YK.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-GG78YK.hta
- Size 2KB
- SHA256 a78ef7fe1da5169e5c1a33f44653555ecaba276e83cd547e5663113a2df40817
- MD5 825be5776723f3d2dee09928f9383e85
- SHA1 6a7b29cc64a82f52189eae9d84635e5b06829561
- SHA512 6ad17ece490baf52ad55520f9b9549905c5b130854e756426147bf4ff289033498eb08d563245a0143e08955b1cf0f6a3c16f3b3fa5259f4fe1f52a42a20c0de
- TLSH T1035153FBBA8663C5BD32599F5A6F518D14A41A422326E0B8F6C7CC41EF8CE4984743D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1