General
- Target extension-fix-1CMYUL.hta
- Size 3KB
- Sample260803-kw74jser81
- SHA256 96c9706381ee5c660cd3b5329f9349ec35be8e802d9f51a9fe1da1718215c7be
- MD5 7f89f063430f28840fff4b2ae4d60811
- SHA1 b56cb1e6f726aab2d1104f6e17078e7176f25b3d
- SHA512 f94f26e0b57d20190b0d84ac854c7036de0554f68553ec5e940bef1c90f99de70abf0e236d2662b8f3f90b4296b07f2577e25fbb4aac0154d3fa70bfa97986f2
- TLSH T12F5176F7BA4652D5BD328AAB1A2F508D589517031366D0F8F297DC00EF98E8D49347D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-1CMYUL.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-1CMYUL.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-1CMYUL.hta
- Size 3KB
- SHA256 96c9706381ee5c660cd3b5329f9349ec35be8e802d9f51a9fe1da1718215c7be
- MD5 7f89f063430f28840fff4b2ae4d60811
- SHA1 b56cb1e6f726aab2d1104f6e17078e7176f25b3d
- SHA512 f94f26e0b57d20190b0d84ac854c7036de0554f68553ec5e940bef1c90f99de70abf0e236d2662b8f3f90b4296b07f2577e25fbb4aac0154d3fa70bfa97986f2
- TLSH T12F5176F7BA4652D5BD328AAB1A2F508D589517031366D0F8F297DC00EF98E8D49347D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1