General
- Target extension-fix-N98ZUW.hta
- Size 3KB
- Sample260803-lm7bbsterc
- SHA256 53ef6154aadb83c2404263cd571f3e9f52605757116361735eccc4d78659242d
- MD5 dfd8e14dd2943ccc81d29a2929edb4e7
- SHA1 53cd9888a72b82f1dd723acb2a5d2983d4664244
- SHA512 460b42cbfd7776fa504113e453ea1c9ba96222227734b496f88eca89f752d1d32225e75fb8542107c7be5b157be6ccbc34157307b855a017733b5ce191cf95b8
- TLSH T18761DAF77A4642C6BC328AAB5A2F509D009417022326E4F8F3D7DC01EF88F8944B87C8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-N98ZUW.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-N98ZUW.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-N98ZUW.hta
- Size 3KB
- SHA256 53ef6154aadb83c2404263cd571f3e9f52605757116361735eccc4d78659242d
- MD5 dfd8e14dd2943ccc81d29a2929edb4e7
- SHA1 53cd9888a72b82f1dd723acb2a5d2983d4664244
- SHA512 460b42cbfd7776fa504113e453ea1c9ba96222227734b496f88eca89f752d1d32225e75fb8542107c7be5b157be6ccbc34157307b855a017733b5ce191cf95b8
- TLSH T18761DAF77A4642C6BC328AAB5A2F509D009417022326E4F8F3D7DC01EF88F8944B87C8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1