General
- Target extension-fix-6PZV93.hta
- Size 3KB
- Sample260803-lla7hatejb
- SHA256 0e0b0253e16aa806202d460ff3fd66ee405d88c24b7edf87787268e00bc1279d
- MD5 02592b82c80e2e0e4eac204577dfbc3a
- SHA1 48ec385269f189664d9442ada8bb5aafeb359087
- SHA512 f5b5525fe86e12585c9f03e82e7c7bd4c14f5c379d23e2f58e4c19c68902c5d78c3eb78876efd7b22b7592add806458d39c7277b6a5e33258ea4d9399a3e01d5
- TLSH T17F6153F77A52A3C1BC32899B2A2F508914951B4227A5E1FCF287D801EF9DF4984393E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-6PZV93.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-6PZV93.hta
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-6PZV93.hta
- Size 3KB
- SHA256 0e0b0253e16aa806202d460ff3fd66ee405d88c24b7edf87787268e00bc1279d
- MD5 02592b82c80e2e0e4eac204577dfbc3a
- SHA1 48ec385269f189664d9442ada8bb5aafeb359087
- SHA512 f5b5525fe86e12585c9f03e82e7c7bd4c14f5c379d23e2f58e4c19c68902c5d78c3eb78876efd7b22b7592add806458d39c7277b6a5e33258ea4d9399a3e01d5
- TLSH T17F6153F77A52A3C1BC32899B2A2F508914951B4227A5E1FCF287D801EF9DF4984393E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1