General
- Target extension-fix-XQXIOS.hta
- Size 3KB
- Sample260803-k9df4afm8y
- SHA256 4ceb0e1c7bfe562cbca47d5023db5fc58b4f7302c5ab66106f31e2a19fb9ecb9
- MD5 384b32fb60e0594d72e61a1440825668
- SHA1 2bf5aa08ab64244c7517701ab3218a5000653134
- SHA512 df9d8af1e04472f6fb788fd51fe919f542535190b5a6ca39ed6f29c24d03e52d474b3608f5da8443990d0cb9b73391d6e61fb88f03945ca551c9810335f53669
- TLSH T1646168F7A94602D6BC3159AB6B6F508910E417431321E4F8F2D3EC05EF88E8D95B83D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-XQXIOS.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-XQXIOS.hta
- Size 3KB
- SHA256 4ceb0e1c7bfe562cbca47d5023db5fc58b4f7302c5ab66106f31e2a19fb9ecb9
- MD5 384b32fb60e0594d72e61a1440825668
- SHA1 2bf5aa08ab64244c7517701ab3218a5000653134
- SHA512 df9d8af1e04472f6fb788fd51fe919f542535190b5a6ca39ed6f29c24d03e52d474b3608f5da8443990d0cb9b73391d6e61fb88f03945ca551c9810335f53669
- TLSH T1646168F7A94602D6BC3159AB6B6F508910E417431321E4F8F2D3EC05EF88E8D95B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1