General
- Target extension-fix-HIIFC9.hta
- Size 2KB
- Sample260803-km727aep4z
- SHA256 ea629ac68e26c5144472aae549aa2ac589ff6317602b62682add2e93129a5da2
- MD5 fd21b778b7532bfe3c4c336253900e9f
- SHA1 2974d6bf14ffc741cb1d6ca3674ac789646017dc
- SHA512 884c83829bfb092b175c1c4f4bedab3cac1c7bd58b88de6b202f9dceb8c36b7abeac1ecf10a9d8eb9028f2b45368bd72e550a0fe9644aec1c6de5a6fa7716b4a
- TLSH T18451DEF77A4642D6BC318A9B6A6F109D549016022362D4F8F3A7ED00EF8CF4945783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-HIIFC9.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-HIIFC9.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-HIIFC9.hta
- Size 2KB
- SHA256 ea629ac68e26c5144472aae549aa2ac589ff6317602b62682add2e93129a5da2
- MD5 fd21b778b7532bfe3c4c336253900e9f
- SHA1 2974d6bf14ffc741cb1d6ca3674ac789646017dc
- SHA512 884c83829bfb092b175c1c4f4bedab3cac1c7bd58b88de6b202f9dceb8c36b7abeac1ecf10a9d8eb9028f2b45368bd72e550a0fe9644aec1c6de5a6fa7716b4a
- TLSH T18451DEF77A4642D6BC318A9B6A6F109D549016022362D4F8F3A7ED00EF8CF4945783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1