General
- Target extension-fix-KZBPSI.hta
- Size 3KB
- Sample260803-la8nmatanh
- SHA256 4b2b5a58902fbdbde63ae6a20e83b8b5ce607c3cb722fd791bba23c392d84914
- MD5 ad9303a826c029a98caae5a0565565d3
- SHA1 d57fab5c624df10b0c349861840494e35126ce82
- SHA512 6b995fecc6718a97a2a7ca2e2e9465f89e6d6768be8204e70c5a67307025777d451d4a79630cda66d379ca8e2f09ca8c5c91571a65d918ea34d0c2cf824c2471
- TLSH T1505130F77A4642C6BC32999B6A2F518D04A417021366E0F8F697DC01EF88F0D44B83D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-KZBPSI.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-KZBPSI.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-KZBPSI.hta
- Size 3KB
- SHA256 4b2b5a58902fbdbde63ae6a20e83b8b5ce607c3cb722fd791bba23c392d84914
- MD5 ad9303a826c029a98caae5a0565565d3
- SHA1 d57fab5c624df10b0c349861840494e35126ce82
- SHA512 6b995fecc6718a97a2a7ca2e2e9465f89e6d6768be8204e70c5a67307025777d451d4a79630cda66d379ca8e2f09ca8c5c91571a65d918ea34d0c2cf824c2471
- TLSH T1505130F77A4642C6BC32999B6A2F518D04A417021366E0F8F697DC01EF88F0D44B83D8
- MD5 SHA1 SHA512 TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1