General
- Target extension-fix-XZB4NB.hta
- Size 3KB
- Sample260803-lg64datdjd
- SHA256 2081b3ac22fa834060fdc73c5a039d9e8288721bca1726d4c1c763bfe7f2b41e
- MD5 d770f1bda7f561ecb617f13a1d2724fb
- SHA1 9b793ad38e803ccd379f74305b698f10d05a8042
- SHA512 efbb196a555dc1cda04d4778288a822a9ef66447c7e769498ef2cc0c8a2840c9f01baa9a798ee263656e01bb6ba763f32ab0c247d8004df5b4cfd0e1f5ea9d23
- TLSH T1CB6114F7B95642C1BC325A9B2A2F508D04940602136AE1F8E7A7EC00EF98F9945B87D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-XZB4NB.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-XZB4NB.hta
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-XZB4NB.hta
- Size 3KB
- SHA256 2081b3ac22fa834060fdc73c5a039d9e8288721bca1726d4c1c763bfe7f2b41e
- MD5 d770f1bda7f561ecb617f13a1d2724fb
- SHA1 9b793ad38e803ccd379f74305b698f10d05a8042
- SHA512 efbb196a555dc1cda04d4778288a822a9ef66447c7e769498ef2cc0c8a2840c9f01baa9a798ee263656e01bb6ba763f32ab0c247d8004df5b4cfd0e1f5ea9d23
- TLSH T1CB6114F7B95642C1BC325A9B2A2F508D04940602136AE1F8E7A7EC00EF98F9945B87D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1