General
- Target extension-fix-PSBH28.hta
- Size 3KB
- Sample260803-leabmatbph
- SHA256 a5f5f0e511946d9e973c308971deafd6bc09a44163a885af2eeb844a922b5baf
- MD5 030decf2217cb970960b644fe6398c96
- SHA1 97eeb6bce4429ec1f816f0cd59d9b0ba17224b9c
- SHA512 3daeccad6786c22dfc95c974aac4ff370b5253c74a919d32cfe92bf2251ebed9f8f65c9878062abcc87d2569a89052bb9d3b7926454fe81041b0021ae1836c3e
- TLSH T1A15100E7BA4692D5BC328ADB0A2F91CE14901B426326E0F8F3D6DC01EF89E4D45747D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-PSBH28.hta
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-PSBH28.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-PSBH28.hta
- Size 3KB
- SHA256 a5f5f0e511946d9e973c308971deafd6bc09a44163a885af2eeb844a922b5baf
- MD5 030decf2217cb970960b644fe6398c96
- SHA1 97eeb6bce4429ec1f816f0cd59d9b0ba17224b9c
- SHA512 3daeccad6786c22dfc95c974aac4ff370b5253c74a919d32cfe92bf2251ebed9f8f65c9878062abcc87d2569a89052bb9d3b7926454fe81041b0021ae1836c3e
- TLSH T1A15100E7BA4692D5BC328ADB0A2F91CE14901B426326E0F8F3D6DC01EF89E4D45747D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1