General
- Target extension-fix-QT25WB.hta
- Size 3KB
- Sample260803-le78natckh
- SHA256 b8a97c0fa62ff8a297683da91b5e7fcc574106ed050a5f925a675bb6eb853457
- MD5 f1d3b53901ff1f9c63432a6a54fd5696
- SHA1 6f72fff08a13fba93dedf4c5df6acf06a295b69d
- SHA512 afb30afd140d03b3b2557191843b1ddbe943da7c24ccc310c14140affe9197e8eb409e4073695412610f3ce9cea9dd8c7ccae2aa00bc39a70b169b819fbe097d
- TLSH T17351CCF7BA4242C6BC31899B6A2F108D14941B422366D1F8E3D7DC01EF8DF5945B87E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-QT25WB.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-QT25WB.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-QT25WB.hta
- Size 3KB
- SHA256 b8a97c0fa62ff8a297683da91b5e7fcc574106ed050a5f925a675bb6eb853457
- MD5 f1d3b53901ff1f9c63432a6a54fd5696
- SHA1 6f72fff08a13fba93dedf4c5df6acf06a295b69d
- SHA512 afb30afd140d03b3b2557191843b1ddbe943da7c24ccc310c14140affe9197e8eb409e4073695412610f3ce9cea9dd8c7ccae2aa00bc39a70b169b819fbe097d
- TLSH T17351CCF7BA4242C6BC31899B6A2F108D14941B422366D1F8E3D7DC01EF8DF5945B87E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1