General
- Target extension-fix-Q0GLY1.hta
- Size 2KB
- Sample260803-kmy5aasbld
- SHA256 cf0d274fa86bafc1e53a2e4d81590c27e60c9b34cf60471e2400c7a34f47dddf
- MD5 f25c5c5f75e2ff5235ef4e40f3060255
- SHA1 f11573ba982dfc3d0a71eec3e5bec1d9996aa7d1
- SHA512 25bc450b8ef32cba60d176d4384625017ba1f223780428e1f91f5663e4642ed7c6a1d4fd1fe7351d004eb69485cf4c580c4483abfc4ee24ba31fd8eac95ee08d
- TLSH T1765155F77A4A42D5BC728A9B1B1F50C918941A422766E0FCF2D6EC00DF8CE9D45787D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-Q0GLY1.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-Q0GLY1.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-Q0GLY1.hta
- Size 2KB
- SHA256 cf0d274fa86bafc1e53a2e4d81590c27e60c9b34cf60471e2400c7a34f47dddf
- MD5 f25c5c5f75e2ff5235ef4e40f3060255
- SHA1 f11573ba982dfc3d0a71eec3e5bec1d9996aa7d1
- SHA512 25bc450b8ef32cba60d176d4384625017ba1f223780428e1f91f5663e4642ed7c6a1d4fd1fe7351d004eb69485cf4c580c4483abfc4ee24ba31fd8eac95ee08d
- TLSH T1765155F77A4A42D5BC728A9B1B1F50C918941A422766E0FCF2D6EC00DF8CE9D45787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1