General
- Target extension-fix-P9Q28M.hta
- Size 2KB
- Sample260803-la5a7sfp2s
- SHA256 f8d25dc0f816f7201520ab0adca392e4058ae824c43c8d6b73e47425ac76a841
- MD5 2a5f1aa2b9e4c80b1a786bf757bb797d
- SHA1 443fdf43c3601dccc03c52c61da934fab20a375f
- SHA512 a8ec2024c7faab016c3d4bc59e737e56f1822fb5568ae7ff3b991e4f8682d097102834bfc6f5bc678f3d70265c940ac2107a007f55342d837a89c4fd660e6ea7
- TLSH T199516AF7BA8653C5BC3249AF2A2F519D24851A42236AD4FCF297DD40EF4CE4988347E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-P9Q28M.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-P9Q28M.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-P9Q28M.hta
- Size 2KB
- SHA256 f8d25dc0f816f7201520ab0adca392e4058ae824c43c8d6b73e47425ac76a841
- MD5 2a5f1aa2b9e4c80b1a786bf757bb797d
- SHA1 443fdf43c3601dccc03c52c61da934fab20a375f
- SHA512 a8ec2024c7faab016c3d4bc59e737e56f1822fb5568ae7ff3b991e4f8682d097102834bfc6f5bc678f3d70265c940ac2107a007f55342d837a89c4fd660e6ea7
- TLSH T199516AF7BA8653C5BC3249AF2A2F519D24851A42236AD4FCF297DD40EF4CE4988347E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1