General
- Target extension-fix-OWKMQZ.hta
- Size 3KB
- Sample260803-lafb3sfn41
- SHA256 f549a97a09b9b0c868e1ce43d6f631144d915a6c47f0e01551b42660157d812f
- MD5 a5f013dd014f36ab0eda498d43031a5a
- SHA1 6fa5e5eacf17641617eda04034e7327b26e20687
- SHA512 89f657fbb7816080876bc23f6591f357dffa7e03f288ddc80cc81bcd2847ae24f4576ee6aae75424c7be5255326a08ad18d92d592c14f5f465e0b63b70befe7c
- TLSH T1C06155F7B90652D8BD328ADB2A2F408D10E41A03136AD4B8F396DD00DF8DE4D85787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-OWKMQZ.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-OWKMQZ.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-OWKMQZ.hta
- Size 3KB
- SHA256 f549a97a09b9b0c868e1ce43d6f631144d915a6c47f0e01551b42660157d812f
- MD5 a5f013dd014f36ab0eda498d43031a5a
- SHA1 6fa5e5eacf17641617eda04034e7327b26e20687
- SHA512 89f657fbb7816080876bc23f6591f357dffa7e03f288ddc80cc81bcd2847ae24f4576ee6aae75424c7be5255326a08ad18d92d592c14f5f465e0b63b70befe7c
- TLSH T1C06155F7B90652D8BD328ADB2A2F408D10E41A03136AD4B8F396DD00DF8DE4D85787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1