General
- Target extension-fix-B5ADS9.hta
- Size 3KB
- Sample260803-lkrsvsfe26
- SHA256 3784799de5768b6d5c29b63f5f6d01cc3a1ba3822f29225f16a341fb9b7689a7
- MD5 4b2f4068ba81be6713004c7ecec10e3e
- SHA1 43cd2d2479032758bd0da7918cd15f5cdab42d0c
- SHA512 65d7809c4d29c7f13830264ea36a10563c0a13fcdc6a688eb191e09cf718a1e1b03b7fc637be3ec456cdf651755fde4886bb68f8026fe05d07822db13549d5e7
- TLSH T1FA61BAE7B80A42D6BD328A9B5A6F40CD549017421326E8F8E7E6DD00EF8DF5D41B8798
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-B5ADS9.hta
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-B5ADS9.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-B5ADS9.hta
- Size 3KB
- SHA256 3784799de5768b6d5c29b63f5f6d01cc3a1ba3822f29225f16a341fb9b7689a7
- MD5 4b2f4068ba81be6713004c7ecec10e3e
- SHA1 43cd2d2479032758bd0da7918cd15f5cdab42d0c
- SHA512 65d7809c4d29c7f13830264ea36a10563c0a13fcdc6a688eb191e09cf718a1e1b03b7fc637be3ec456cdf651755fde4886bb68f8026fe05d07822db13549d5e7
- TLSH T1FA61BAE7B80A42D6BD328A9B5A6F40CD549017421326E8F8E7E6DD00EF8DF5D41B8798
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1