General
- Target extension-fix-5WKN2S.hta
- Size 3KB
- Sample260803-lktx8afe29
- SHA256 a5168cc9c05ce12f7bef9db66fa2c75e4c4142496dd69e91b0b44a2c8794a1e8
- MD5 75969f495aa3c5802f5135dd7b8d370f
- SHA1 5f633445b28cfd680b47f73b17d97e9a231e934d
- SHA512 cfe624ba9fc051c1528e62688a297dcd16ee3f8482f07172cc20eb4924a8d4d57f67277b35a4689aa66dc4dc734f305d3a38037557b72304716b9879dc5b2f13
- TLSH T12D61FDE7B94A92C5BD72899B0A6F508D549417021326E0FCE3E6DC009F8CF5985787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-5WKN2S.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-5WKN2S.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-5WKN2S.hta
- Size 3KB
- SHA256 a5168cc9c05ce12f7bef9db66fa2c75e4c4142496dd69e91b0b44a2c8794a1e8
- MD5 75969f495aa3c5802f5135dd7b8d370f
- SHA1 5f633445b28cfd680b47f73b17d97e9a231e934d
- SHA512 cfe624ba9fc051c1528e62688a297dcd16ee3f8482f07172cc20eb4924a8d4d57f67277b35a4689aa66dc4dc734f305d3a38037557b72304716b9879dc5b2f13
- TLSH T12D61FDE7B94A92C5BD72899B0A6F508D549417021326E0FCE3E6DC009F8CF5985787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1