General
- Target extension-fix-B1PKEU.hta
- Size 2KB
- Sample260803-la8cvsfc93
- SHA256 78da600a29ef4d713e803783fb7f1f471e774f1757068d2517655c888a408c7d
- MD5 26a1a1cab7838f4b03114409f8a208e0
- SHA1 5e562676be74c1527853c6fa7a0971e04198d962
- SHA512 bb39af2b1338c3d98e992b8f06e2eabece0e74fc6a25ac300e5d648a9b1bcef019dbee1cc3af5dc65d0498baa0801409590992f27de99027753e51521beaf900
- TLSH T16D51BCF7AA4253D1BC324A9F6A3F514C18D95A432365D0F8F786C801EF8CE4A45383E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-B1PKEU.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-B1PKEU.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-B1PKEU.hta
- Size 2KB
- SHA256 78da600a29ef4d713e803783fb7f1f471e774f1757068d2517655c888a408c7d
- MD5 26a1a1cab7838f4b03114409f8a208e0
- SHA1 5e562676be74c1527853c6fa7a0971e04198d962
- SHA512 bb39af2b1338c3d98e992b8f06e2eabece0e74fc6a25ac300e5d648a9b1bcef019dbee1cc3af5dc65d0498baa0801409590992f27de99027753e51521beaf900
- TLSH T16D51BCF7AA4253D1BC324A9F6A3F514C18D95A432365D0F8F786C801EF8CE4A45383E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2