82799afd0308c1d2fbc77b1384dab658275f7b372606500db3a2fbf2902a238d

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 09:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
extension-fix-C39VIJ.hta
Size 2KB
Sample260803-lk51gstdrc
SHA256 82799afd0308c1d2fbc77b1384dab658275f7b372606500db3a2fbf2902a238d
MD5 a99519e4d3d822abbfb17b1b681d83f6
SHA1 3ced7363b039ce44f05d45987b2eafdac275d118
SHA512 f401c61d0ca515b3c567e118ecbe1f0f91b90906304a08a21fb845bbfb0b05d3c6d5ad236244db6126358aa8c8764d1098cdbd1559d71cdb6b524100c6d5ed37
TLSH
T1EB5164E7BA4653D4BC314A9B6B7F608D54D41A532366E0F8F292DC00EFC9E5944783E8
MD5 SHA1 SHA512 TLSH

Score

8^/10

discovery

Malware Config

Signatures

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
6	4252	mshta.exe
11	4252	mshta.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\extension-fix-C39VIJ.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
PID:4252

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads