General
- Target extension-fix-7SOOV2.hta
- Size 3KB
- Sample260803-kls7mssard
- SHA256 b5f1971f02d76eb01e0c8c000a45210b8b8b75d2e2b4e9b17944c5550f72874b
- MD5 321aa90dace97e054f8d169d3389ac61
- SHA1 af400d2470090a8fe7020899f7af47683e80f0d6
- SHA512 a029bad5d7c8197595c074725e07a208641cdc9656f82ad491bd7218876297099e6d88d6eaa68e22e7d5dbb60ff28722090d90217f4315ccffb6f820958fd66b
- TLSH T15461F0F7B94A52C2BC319A9B2A6F508E549017425366D4FCE397DC00EF8CF5944B83D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-7SOOV2.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-7SOOV2.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-7SOOV2.hta
- Size 3KB
- SHA256 b5f1971f02d76eb01e0c8c000a45210b8b8b75d2e2b4e9b17944c5550f72874b
- MD5 321aa90dace97e054f8d169d3389ac61
- SHA1 af400d2470090a8fe7020899f7af47683e80f0d6
- SHA512 a029bad5d7c8197595c074725e07a208641cdc9656f82ad491bd7218876297099e6d88d6eaa68e22e7d5dbb60ff28722090d90217f4315ccffb6f820958fd66b
- TLSH T15461F0F7B94A52C2BC319A9B2A6F508E549017425366D4FCE397DC00EF8CF5944B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1