General
- Target extension-fix-6T3FKU.hta
- Size 3KB
- Sample260803-lg9jhatdkc
- SHA256 18c569c33df85e90854b09d7769856daaef2e56c758f03295e1141af263a1a68
- MD5 671fecb41009c2a36f429b0be3f452bd
- SHA1 b01845603a660a193e92c1a5693971c2ed179623
- SHA512 da4eb4ed1b70d0de99fe9750739bb0ae6da36bb0306588943cbf45c3451781e91f263ff5a6a4d7938fdc280708711ed4306bf7a5acfd1ec6df1f4e594067b964
- TLSH T1FC5131F7B94A52C5BC328A9B2A2F14CD54D41A425326E4FCF297DC00EF8DE4945787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-6T3FKU.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-6T3FKU.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-6T3FKU.hta
- Size 3KB
- SHA256 18c569c33df85e90854b09d7769856daaef2e56c758f03295e1141af263a1a68
- MD5 671fecb41009c2a36f429b0be3f452bd
- SHA1 b01845603a660a193e92c1a5693971c2ed179623
- SHA512 da4eb4ed1b70d0de99fe9750739bb0ae6da36bb0306588943cbf45c3451781e91f263ff5a6a4d7938fdc280708711ed4306bf7a5acfd1ec6df1f4e594067b964
- TLSH T1FC5131F7B94A52C5BC328A9B2A2F14CD54D41A425326E4FCF297DC00EF8DE4945787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1