General
- Target extension-fix-26K6L6.hta
- Size 2KB
- Sample260803-latvgafn7v
- SHA256 f04ef805e58483ff7ac3ee72acaaf09d16d57a0390f14163df0d9e8d9e9c5383
- MD5 95600d0fa625f5edd597641ed25bd3eb
- SHA1 d48debbe8393bfbd58eb8eb9b7f9929a456f9301
- SHA512 a27c7215b8ce804c11a1d0832c7ba73c42e08add9c36b18243160502ea21c4db25f7f48ffa804564c8c7aa9c6fa9dc7beeef5b14c2a80652ddacb3fad5b448ef
- TLSH T1D351CEF77AC623E8BC721CEB2B3F509914A406072365E0F8F6569D40AF88A5D84757E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-26K6L6.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-26K6L6.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-26K6L6.hta
- Size 2KB
- SHA256 f04ef805e58483ff7ac3ee72acaaf09d16d57a0390f14163df0d9e8d9e9c5383
- MD5 95600d0fa625f5edd597641ed25bd3eb
- SHA1 d48debbe8393bfbd58eb8eb9b7f9929a456f9301
- SHA512 a27c7215b8ce804c11a1d0832c7ba73c42e08add9c36b18243160502ea21c4db25f7f48ffa804564c8c7aa9c6fa9dc7beeef5b14c2a80652ddacb3fad5b448ef
- TLSH T1D351CEF77AC623E8BC721CEB2B3F509914A406072365E0F8F6569D40AF88A5D84757E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1