0b5609bc407945e0d1a8a9d2cc9dcf6ca07821ba2ef780004972dde8aed7e811

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 09:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
extension-fix-UD85ZB.hta
Size 3KB
Sample260803-lfsvcsv1dz
SHA256 0b5609bc407945e0d1a8a9d2cc9dcf6ca07821ba2ef780004972dde8aed7e811
MD5 4af7b7810a9d3d5ceefcd8f6de61ec6e
SHA1 7545d18cc2c0dbbe37d667a670fe6181942e19b3
SHA512 f374ac0031b0b4a4d2e039c1757c4b75ce1ea9480595709af6ef338f2b08a9c445725bb5fd364df306c47ccded87b946191169ec6f05313d9f36b6142fd018f4
TLSH
T13361BCF7B94652D6BC328E9B6AAF50CD449416022366E4FCE3A7DC00EF99F4944743E8
MD5 SHA1 SHA512 TLSH

Score

8^/10

discovery

Malware Config

Signatures

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
6	6108	mshta.exe
7	6108	mshta.exe
9	6108	mshta.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\extension-fix-UD85ZB.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
PID:6108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads