General
- Target extension-fix-HPXWWM.hta
- Size 3KB
- Sample260803-krfhqseh79
- SHA256 229b0281beac1696fefbc133b2d4feb9b613359264387b617178d247c8e88b06
- MD5 af7cae3bbf71b20087dff5a576e3e9dd
- SHA1 d302e1ffef535ca2832249a6e74730485c70d784
- SHA512 277630a88aadb1bb33e1a468731432a4e9af86f345cb67b016f9d625750f5cc24aecb6acd1ebc13ae0ce1c74a036ada052a3f2fbcf06af2e39d3585817b77de1
- TLSH T1E95120FBB84652D5BD328A9F1A2F508D549426122326E1F8F2D7DD01EF89F4E44783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-HPXWWM.hta
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-HPXWWM.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-HPXWWM.hta
- Size 3KB
- SHA256 229b0281beac1696fefbc133b2d4feb9b613359264387b617178d247c8e88b06
- MD5 af7cae3bbf71b20087dff5a576e3e9dd
- SHA1 d302e1ffef535ca2832249a6e74730485c70d784
- SHA512 277630a88aadb1bb33e1a468731432a4e9af86f345cb67b016f9d625750f5cc24aecb6acd1ebc13ae0ce1c74a036ada052a3f2fbcf06af2e39d3585817b77de1
- TLSH T1E95120FBB84652D5BD328A9F1A2F508D549426122326E1F8F2D7DD01EF89F4E44783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1