General
- Target extension-fix-CYBOKI.hta
- Size 3KB
- Sample260803-kn28bssbpe
- SHA256 b30d4fb492fbc829045520f21ef4580034e0ebf090d4328861a90e6abcb8d0b8
- MD5 7f7c3949b36aeb7801c01e23785fa7ae
- SHA1 a5926113f3d44987b93cb44f85c302b9c273dc9d
- SHA512 812b998f30712916ccd09f2cd8e597751f97971598743ba31eec8df12fc43729b209d096c4e62389667e11ffd2288eed52285b1f35f9768200388c06efcfd791
- TLSH T13C6103F3BA4A42C6BC3199AB5A6F409D549417031366D0F8F6D7DC01EF88E5D88787D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-CYBOKI.hta
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-CYBOKI.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-CYBOKI.hta
- Size 3KB
- SHA256 b30d4fb492fbc829045520f21ef4580034e0ebf090d4328861a90e6abcb8d0b8
- MD5 7f7c3949b36aeb7801c01e23785fa7ae
- SHA1 a5926113f3d44987b93cb44f85c302b9c273dc9d
- SHA512 812b998f30712916ccd09f2cd8e597751f97971598743ba31eec8df12fc43729b209d096c4e62389667e11ffd2288eed52285b1f35f9768200388c06efcfd791
- TLSH T13C6103F3BA4A42C6BC3199AB5A6F409D549417031366D0F8F6D7DC01EF88E5D88787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1