General
- Target extension-fix-5AIAZO.hta
- Size 3KB
- Sample260803-lbj2nataqf
- SHA256 1ff27640a0e79742009fe81e4645ef9d4c51a7c2f2fb8aeed5198b5cfc2b68fb
- MD5 55dc53643d5827b3e854e64294a328e9
- SHA1 847dce6e4e8443862753a8fbc7a15765595b7b36
- SHA512 eb2caa813fa93a77f8d87af8f830f5d3ea61b051673c2be4775da73a6a6a3b8f3064dd34d8be76d68c1bb46a86feebc0eae8379d71a35438d858602e18a62743
- TLSH T1FC61ABF7795682C6BD3289AB2A6F409D449417021366D5F8E3D6DC00EF8CE5D44B83D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-5AIAZO.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-5AIAZO.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-5AIAZO.hta
- Size 3KB
- SHA256 1ff27640a0e79742009fe81e4645ef9d4c51a7c2f2fb8aeed5198b5cfc2b68fb
- MD5 55dc53643d5827b3e854e64294a328e9
- SHA1 847dce6e4e8443862753a8fbc7a15765595b7b36
- SHA512 eb2caa813fa93a77f8d87af8f830f5d3ea61b051673c2be4775da73a6a6a3b8f3064dd34d8be76d68c1bb46a86feebc0eae8379d71a35438d858602e18a62743
- TLSH T1FC61ABF7795682C6BD3289AB2A6F409D449417021366D5F8E3D6DC00EF8CE5D44B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2