General
- Target extension-fix-XILI4L.hta
- Size 2KB
- Sample260803-lany8avydz
- SHA256 dd5f057fb32b3c3bb24bf23b7d8d1dff0e7b51356e2d6b35e127909f783c39c4
- MD5 fa6f151007b0b080811db05910073ba2
- SHA1 a599be118709952f768739968cd62e6181f47e8a
- SHA512 a064034f8c9150fa896c64e184079852bb2d90326416bcdde80c8097aae3c720266760c8afbc984ab1d48357714a1fdc80e36f339f2e13b38df2138a98ff3c92
- TLSH T1C95175F77A8647C2BD3259AB5A2F60CD25940B025362E4F8F693DC00AF9CE4D45783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-XILI4L.hta
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-XILI4L.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-XILI4L.hta
- Size 2KB
- SHA256 dd5f057fb32b3c3bb24bf23b7d8d1dff0e7b51356e2d6b35e127909f783c39c4
- MD5 fa6f151007b0b080811db05910073ba2
- SHA1 a599be118709952f768739968cd62e6181f47e8a
- SHA512 a064034f8c9150fa896c64e184079852bb2d90326416bcdde80c8097aae3c720266760c8afbc984ab1d48357714a1fdc80e36f339f2e13b38df2138a98ff3c92
- TLSH T1C95175F77A8647C2BD3259AB5A2F60CD25940B025362E4F8F693DC00AF9CE4D45783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1