General
- Target extension-fix-FCJQXU.hta
- Size 3KB
- Sample260803-ldh75stbng
- SHA256 33775596a9e54d0c34a89001939a65901430beebe58d4af09cb2330d846f7184
- MD5 0713a91a9a79a3a82d395d5cb83c8ec9
- SHA1 e8373909a4ee7df6abca00eb759917af3faf6186
- SHA512 acf73f265dc6c9e289541636a2b137056c70041e57e0c327722b616c1fe7698bdb30fef8f6c1ee0751082bebf4121f4f941cd7bfbc82c55570036c48b0b05a61
- TLSH T16E61EEF3698652C1BC32999B1A6F50CD54940A022366E4F8E6D7DC01EF9CF9A45B83D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-FCJQXU.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-FCJQXU.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-FCJQXU.hta
- Size 3KB
- SHA256 33775596a9e54d0c34a89001939a65901430beebe58d4af09cb2330d846f7184
- MD5 0713a91a9a79a3a82d395d5cb83c8ec9
- SHA1 e8373909a4ee7df6abca00eb759917af3faf6186
- SHA512 acf73f265dc6c9e289541636a2b137056c70041e57e0c327722b616c1fe7698bdb30fef8f6c1ee0751082bebf4121f4f941cd7bfbc82c55570036c48b0b05a61
- TLSH T16E61EEF3698652C1BC32999B1A6F50CD54940A022366E4F8E6D7DC01EF9CF9A45B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1