General
- Target extension-fix-0E7S3N.hta
- Size 2KB
- Sample260803-lj42sswsfs
- SHA256 44f61e1093a0cb8e048875a8ba0ab7ee36c97c3ee74ad332e2de3aac33011567
- MD5 9f8a383b020e0c86c430619f595147de
- SHA1 2412e669b21a5c829160de40340715514f7dcddb
- SHA512 c07f72288355c6956f017c56171c7c3f7bb1964fa09afe4eeded84cd7eedfd7690cae3f09b9c3292b6e18101fa875b6ddc6f98000cb2f0d0a2730561c649d607
- TLSH T14B5176F7BE8253C6BC32599F5A6F609C64881A422361D0F8F697DC01EF9CE4A44387D4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-0E7S3N.hta
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-0E7S3N.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-0E7S3N.hta
- Size 2KB
- SHA256 44f61e1093a0cb8e048875a8ba0ab7ee36c97c3ee74ad332e2de3aac33011567
- MD5 9f8a383b020e0c86c430619f595147de
- SHA1 2412e669b21a5c829160de40340715514f7dcddb
- SHA512 c07f72288355c6956f017c56171c7c3f7bb1964fa09afe4eeded84cd7eedfd7690cae3f09b9c3292b6e18101fa875b6ddc6f98000cb2f0d0a2730561c649d607
- TLSH T14B5176F7BE8253C6BC32599F5A6F609C64881A422361D0F8F697DC01EF9CE4A44387D4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1