General
- Target extension-fix-HOB6ZN.hta
- Size 3KB
- Sample260803-ks7nlssdjf
- SHA256 87777d71571d5b2d93fd497dff29a55430bd9ded6c9fe35f2bc1555b5e89999d
- MD5 f193e6d3ff6a531f8219fec034b51f91
- SHA1 2836f67d976cfa645d9b8526f15f7e5259fe47e3
- SHA512 a5f2c622fb773c6f8c21bb8ecd39120c9efc0514ff3657dfca3ed80c3de6cd66ef9129c7a7eef8f0e377293c67df0922858693e67a1e4c8d86b73c0f4f9a618e
- TLSH T16E610DE7BE4213C6BC3158AF1A6F908C24E41B435369F5B8F697ED00BF88A4945787D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-HOB6ZN.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-HOB6ZN.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-HOB6ZN.hta
- Size 3KB
- SHA256 87777d71571d5b2d93fd497dff29a55430bd9ded6c9fe35f2bc1555b5e89999d
- MD5 f193e6d3ff6a531f8219fec034b51f91
- SHA1 2836f67d976cfa645d9b8526f15f7e5259fe47e3
- SHA512 a5f2c622fb773c6f8c21bb8ecd39120c9efc0514ff3657dfca3ed80c3de6cd66ef9129c7a7eef8f0e377293c67df0922858693e67a1e4c8d86b73c0f4f9a618e
- TLSH T16E610DE7BE4213C6BC3158AF1A6F908C24E41B435369F5B8F697ED00BF88A4945787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1