General
- Target extension-fix-G0JOG9.hta
- Size 3KB
- Sample260803-le85ystclb
- SHA256 6064a28d5c9ea271ecba68f52fe41966f03de490cf42a40f3a968f7b2e5dec14
- MD5 ad6544ba1f35836c73af77ba7b0ac144
- SHA1 f6528c7f7c71596477417f601c52007a9be87ad0
- SHA512 d14a632bdaf78ead7532f56b16d52eea19a045c64eb164de24d1675c8274ccf9d5bbd19fc69e034acfc9c22b10fea92e478286cf35755dbd0fb59114d21e73ae
- TLSH T13C6101F7B94A42C6BC31899B1A6F508D549407422376E4FCF2D6DC00EF9CE8A85743D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-G0JOG9.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-G0JOG9.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-G0JOG9.hta
- Size 3KB
- SHA256 6064a28d5c9ea271ecba68f52fe41966f03de490cf42a40f3a968f7b2e5dec14
- MD5 ad6544ba1f35836c73af77ba7b0ac144
- SHA1 f6528c7f7c71596477417f601c52007a9be87ad0
- SHA512 d14a632bdaf78ead7532f56b16d52eea19a045c64eb164de24d1675c8274ccf9d5bbd19fc69e034acfc9c22b10fea92e478286cf35755dbd0fb59114d21e73ae
- TLSH T13C6101F7B94A42C6BC31899B1A6F508D549407422376E4FCF2D6DC00EF9CE8A85743D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1