General
- Target extension-fix-VZXPMM.hta
- Size 3KB
- Sample260803-kzeamssepc
- SHA256 eab06b16d14ada4eb00ed3897b9f0fbf619453acd77e818d4cf2284b5f28d679
- MD5 2c5c5fb05588b74355de627f858e493b
- SHA1 35388c9e5ff362cb4f3fe966938a0040f8e66851
- SHA512 8b085e34bce8612a71edca3d4e26b4969c771cae470f592cf3202995f7907aaf3d9095a87d9c70157a5b8923c8f292aae8b1b5430bdb1fa32464f369d56abda3
- TLSH T1A2618AF7784A81C6BC319A971A6F50CE40A017025366E4F8E3DBDD40DE8DF5D45B8388
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-VZXPMM.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-VZXPMM.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-VZXPMM.hta
- Size 3KB
- SHA256 eab06b16d14ada4eb00ed3897b9f0fbf619453acd77e818d4cf2284b5f28d679
- MD5 2c5c5fb05588b74355de627f858e493b
- SHA1 35388c9e5ff362cb4f3fe966938a0040f8e66851
- SHA512 8b085e34bce8612a71edca3d4e26b4969c771cae470f592cf3202995f7907aaf3d9095a87d9c70157a5b8923c8f292aae8b1b5430bdb1fa32464f369d56abda3
- TLSH T1A2618AF7784A81C6BC319A971A6F50CE40A017025366E4F8E3DBDD40DE8DF5D45B8388
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1