General
- Target extension-fix-P9S7K7.hta
- Size 3KB
- Sample260803-lfrx3afq8v
- SHA256 21a253542f2d3f8f12fc20a56a5bb704609d17458f92ee82e949e8c4e8a55cfc
- MD5 5deeed4af9a4b9ce562c507af694a80c
- SHA1 cd3fa06a24cdff9de21c7c915028f2ff24e00198
- SHA512 d63ad349d53bb1869dee9f033a39aac1c2d43522e49998c1dbe62c73aafee84d3edd765a8744e92c2602389dcbfbc9b79fc283b5f5ca447a3d7d4c5607a2a359
- TLSH T1875158E7BA8257D67C31899FAA2F209D14941B021366E5B8F7D7DD00EF9CE0944783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-P9S7K7.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-P9S7K7.hta
- Size 3KB
- SHA256 21a253542f2d3f8f12fc20a56a5bb704609d17458f92ee82e949e8c4e8a55cfc
- MD5 5deeed4af9a4b9ce562c507af694a80c
- SHA1 cd3fa06a24cdff9de21c7c915028f2ff24e00198
- SHA512 d63ad349d53bb1869dee9f033a39aac1c2d43522e49998c1dbe62c73aafee84d3edd765a8744e92c2602389dcbfbc9b79fc283b5f5ca447a3d7d4c5607a2a359
- TLSH T1875158E7BA8257D67C31899FAA2F209D14941B021366E5B8F7D7DD00EF9CE0944783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1