General
- Target extension-fix-5927MX.hta
- Size 3KB
- Sample260803-kw5y7afa72
- SHA256 a693ef82c8445bb32cb70c13580fada7aaa801cd3c914f9c3167300e4cae0acb
- MD5 54976812b4cb68cc2e922c67c35dbecd
- SHA1 9071a8861ec1625406f03f80c94810bef2727929
- SHA512 60520074a8f1fea542237b5c2efbc43850378875453a72597dd17bec3aace6352c93ebaffe4588ab481eae2aee5573b9b5e17a63b99eec44f221c12262ca10a9
- TLSH T1806100F7BA8642C6BC32899B6A6F509C54905B426366D0F8F3D7DC00EF8DE4944783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-5927MX.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-5927MX.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-5927MX.hta
- Size 3KB
- SHA256 a693ef82c8445bb32cb70c13580fada7aaa801cd3c914f9c3167300e4cae0acb
- MD5 54976812b4cb68cc2e922c67c35dbecd
- SHA1 9071a8861ec1625406f03f80c94810bef2727929
- SHA512 60520074a8f1fea542237b5c2efbc43850378875453a72597dd17bec3aace6352c93ebaffe4588ab481eae2aee5573b9b5e17a63b99eec44f221c12262ca10a9
- TLSH T1806100F7BA8642C6BC32899B6A6F509C54905B426366D0F8F3D7DC00EF8DE4944783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1