General
- Target extension-fix-YBNNWW.hta
- Size 3KB
- Sample260803-ldff9afc97
- SHA256 02792bb42e3aa059cf180cf6aa8add3126a9e7f9d39ef058c63056bffa60808b
- MD5 4f13ea7c7c888ff555d7e7afc974e6c4
- SHA1 6f566b0c68dafe0d5a7ab16a9700c0e48197e517
- SHA512 178733f9d8c8762a6cbe8da78af0aee2e05ba733939f9c11efb67d0eea88df1cd5056ceda1c45ebc407f161dd0923562f6481c151fa4edbbec59fdd968493e5f
- TLSH T16361EAF7B94A52D5BD328A9B1E6F40C910A422021326E5F8F6A6EC00DF88E5D41787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-YBNNWW.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-YBNNWW.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-YBNNWW.hta
- Size 3KB
- SHA256 02792bb42e3aa059cf180cf6aa8add3126a9e7f9d39ef058c63056bffa60808b
- MD5 4f13ea7c7c888ff555d7e7afc974e6c4
- SHA1 6f566b0c68dafe0d5a7ab16a9700c0e48197e517
- SHA512 178733f9d8c8762a6cbe8da78af0aee2e05ba733939f9c11efb67d0eea88df1cd5056ceda1c45ebc407f161dd0923562f6481c151fa4edbbec59fdd968493e5f
- TLSH T16361EAF7B94A52D5BD328A9B1E6F40C910A422021326E5F8F6A6EC00DF88E5D41787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1