General
- Target extension-fix-1V0OKP.hta
- Size 2KB
- Sample260803-kwwqhsfa59
- SHA256 8af47ddbb9bbdf91533c397f7ce9d6234ff4f394c4ac3205c90bde5d317a2537
- MD5 97c349322409ff5c2b50719f72a8055b
- SHA1 f8f83470e84e9bdd2d18782933be11b02045db51
- SHA512 235b39c61a1f36050bf68000cdb7cafefba677f1f44693fdedfb236a4298e1ca7994a174a335a24c98f8bc5d6c4a27b9d98da90d9c593f1093bdaf7b42a9e60b
- TLSH T1DD51CDF7AA4653D4BC32859F1A2F509964942A432721E0B8F297DC04EF88E8E55383E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-1V0OKP.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-1V0OKP.hta
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-1V0OKP.hta
- Size 2KB
- SHA256 8af47ddbb9bbdf91533c397f7ce9d6234ff4f394c4ac3205c90bde5d317a2537
- MD5 97c349322409ff5c2b50719f72a8055b
- SHA1 f8f83470e84e9bdd2d18782933be11b02045db51
- SHA512 235b39c61a1f36050bf68000cdb7cafefba677f1f44693fdedfb236a4298e1ca7994a174a335a24c98f8bc5d6c4a27b9d98da90d9c593f1093bdaf7b42a9e60b
- TLSH T1DD51CDF7AA4653D4BC32859F1A2F509964942A432721E0B8F297DC04EF88E8E55383E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1