General
- Target extension-fix-IIJEFS.hta
- Size 2KB
- Sample260803-lk75vafe45
- SHA256 e3302e5af5ab384b743659b30856762843da67e0c75538946cf3f6f1ad9115c2
- MD5 5091fd4568dba5929d0399170218afed
- SHA1 2ca7ed981ff77c34e99224ce10116c34e3281d2b
- SHA512 8794fc8dc7d15d7962b6bdaf7f7d3d51f72f561bc4d4e6aac1b5bec3e6f9f5c15ee98e71b6999ffddab6a272ce2c7e688d68ca3a6f3f32153b9ba6e61107f656
- TLSH T1655166F7BA5793C1BD7259EF1A2F118C24940A522365D1B8F68AD800EF98F4EC4747E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-IIJEFS.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-IIJEFS.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-IIJEFS.hta
- Size 2KB
- SHA256 e3302e5af5ab384b743659b30856762843da67e0c75538946cf3f6f1ad9115c2
- MD5 5091fd4568dba5929d0399170218afed
- SHA1 2ca7ed981ff77c34e99224ce10116c34e3281d2b
- SHA512 8794fc8dc7d15d7962b6bdaf7f7d3d51f72f561bc4d4e6aac1b5bec3e6f9f5c15ee98e71b6999ffddab6a272ce2c7e688d68ca3a6f3f32153b9ba6e61107f656
- TLSH T1655166F7BA5793C1BD7259EF1A2F118C24940A522365D1B8F68AD800EF98F4EC4747E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2