General
- Target extension-fix-DUGI0N.hta
- Size 3KB
- Sample260803-la896avyg1
- SHA256 79d114a8ffb7455552a09018de80feff12b0efd5d23e8caff3e8fbae1fa392de
- MD5 043f33313ec07ee325e9de9c88c6a6f3
- SHA1 9361a564556b963d29eb94750b4db10426f97d7a
- SHA512 93eba5efb9d12b315b8b40a81bb241de67d2a4682dad2f91c1f12629c62b69b6c8172a5aa6ab09af5b0054851965df6b9b78b89be838825db8b85c5947cb8270
- TLSH T1DC5102F7AA4A42C5BC318A9B6B2F908D14841A426366E5FCF2D7DC01DF89E5944783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-DUGI0N.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-DUGI0N.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-DUGI0N.hta
- Size 3KB
- SHA256 79d114a8ffb7455552a09018de80feff12b0efd5d23e8caff3e8fbae1fa392de
- MD5 043f33313ec07ee325e9de9c88c6a6f3
- SHA1 9361a564556b963d29eb94750b4db10426f97d7a
- SHA512 93eba5efb9d12b315b8b40a81bb241de67d2a4682dad2f91c1f12629c62b69b6c8172a5aa6ab09af5b0054851965df6b9b78b89be838825db8b85c5947cb8270
- TLSH T1DC5102F7AA4A42C5BC318A9B6B2F908D14841A426366E5FCF2D7DC01DF89E5944783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2