General
- Target extension-fix-207MJJ.hta
- Size 2KB
- Sample260803-lkvvhsfe32
- SHA256 cc067ebfc9856a5d7f82f8acdfaae62fef34102f7d3fd21c6735996b67b020e5
- MD5 815ae95c5ac3e17b32fe19b8a166fba0
- SHA1 f008069b89123d611f3587b03d2aca40c7368773
- SHA512 1e487ba54e3a0e26101a3074fda8b3592ab96dfb23a850ee9f21a5bbbfbe72d8f69adb05df16fcef218ffd1566477ffdee67a32632b17c2eb6015f907c8c123f
- TLSH T14851E1EBAE4A13D4BD3359DF6B3F508A14E51A030324E1B4F586CD40FF44A4A85797E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-207MJJ.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-207MJJ.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-207MJJ.hta
- Size 2KB
- SHA256 cc067ebfc9856a5d7f82f8acdfaae62fef34102f7d3fd21c6735996b67b020e5
- MD5 815ae95c5ac3e17b32fe19b8a166fba0
- SHA1 f008069b89123d611f3587b03d2aca40c7368773
- SHA512 1e487ba54e3a0e26101a3074fda8b3592ab96dfb23a850ee9f21a5bbbfbe72d8f69adb05df16fcef218ffd1566477ffdee67a32632b17c2eb6015f907c8c123f
- TLSH T14851E1EBAE4A13D4BD3359DF6B3F508A14E51A030324E1B4F586CD40FF44A4A85797E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2