General
- Target extension-fix-D7ATM0.hta
- Size 2KB
- Sample260803-leeaksfq3y
- SHA256 41aee8403ef04afc73b8fbe3dca1f17c035bcd7d8a50e6c32b47a882ccd800f0
- MD5 75b739b2c3b4a09e420757d00ee7408a
- SHA1 ed334c2f67a700017480a99041bdfd187977dbf2
- SHA512 62a6149ef6c235b5fe9701d353d7810eaf82b51897f232fc9856a8cca9dfb75fceccc72e105c118e20b510ef40b26318189f07c6b8c24aa03954dcf41afb11ec
- TLSH T14F5169FB7A4A62D6BD7299DB5E2F108914A417021322D5F8F697EC00EF89F0D81347D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-D7ATM0.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-D7ATM0.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-D7ATM0.hta
- Size 2KB
- SHA256 41aee8403ef04afc73b8fbe3dca1f17c035bcd7d8a50e6c32b47a882ccd800f0
- MD5 75b739b2c3b4a09e420757d00ee7408a
- SHA1 ed334c2f67a700017480a99041bdfd187977dbf2
- SHA512 62a6149ef6c235b5fe9701d353d7810eaf82b51897f232fc9856a8cca9dfb75fceccc72e105c118e20b510ef40b26318189f07c6b8c24aa03954dcf41afb11ec
- TLSH T14F5169FB7A4A62D6BD7299DB5E2F108914A417021322D5F8F697EC00EF89F0D81347D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1