General
- Target extension-fix-7VARCM.hta
- Size 2KB
- Sample260803-k9jccashqd
- SHA256 d9cb6127074f3a797885a2e662ea7ae11c03b46945d785484f5fc01b03c4e613
- MD5 386a98064f08e3490e88b2d2ecb23736
- SHA1 a053f1f4378a3f9ef87be89dc7e437fb43508922
- SHA512 312fdf08e50cd9ccd6773723274ce8d1326277ecf2eafef82a77de8cafcab5a0b5a38014d5bc4df3526261543005adf0a594bc4cba7bcac3b7ca2ee58a47d061
- TLSH T1A15136F77A8253C6BC31499B6A6F209D2498164323A1D4FCF697D800EF8CE9E49743E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-7VARCM.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-7VARCM.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-7VARCM.hta
- Size 2KB
- SHA256 d9cb6127074f3a797885a2e662ea7ae11c03b46945d785484f5fc01b03c4e613
- MD5 386a98064f08e3490e88b2d2ecb23736
- SHA1 a053f1f4378a3f9ef87be89dc7e437fb43508922
- SHA512 312fdf08e50cd9ccd6773723274ce8d1326277ecf2eafef82a77de8cafcab5a0b5a38014d5bc4df3526261543005adf0a594bc4cba7bcac3b7ca2ee58a47d061
- TLSH T1A15136F77A8253C6BC31499B6A6F209D2498164323A1D4FCF697D800EF8CE9E49743E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1