General
- Target extension-fix-DJBGG7.hta
- Size 3KB
- Sample260803-lnmnbawvbt
- SHA256 4ebedd80f37567617dff71605886fb47c345e792a0e2a824673acd468b8e52a4
- MD5 cfd01b9bc3ed0c6c75710071ce2c6380
- SHA1 35a131e7d866dcad43f83961eba29d86fa64fe66
- SHA512 c550ad50f7239ba1212ad8eb31ad45d1348f01a3aa038a6233dbdd9bb9803ade75ab3159d71a57de7627eeac067318af7f01b20da11ad0138dbdd2550b46c790
- TLSH T18661F0F7BA4642C6BD329AAB6A6F508D149417026366D5F8F6D7EC00DF88F4C40787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-DJBGG7.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-DJBGG7.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-DJBGG7.hta
- Size 3KB
- SHA256 4ebedd80f37567617dff71605886fb47c345e792a0e2a824673acd468b8e52a4
- MD5 cfd01b9bc3ed0c6c75710071ce2c6380
- SHA1 35a131e7d866dcad43f83961eba29d86fa64fe66
- SHA512 c550ad50f7239ba1212ad8eb31ad45d1348f01a3aa038a6233dbdd9bb9803ade75ab3159d71a57de7627eeac067318af7f01b20da11ad0138dbdd2550b46c790
- TLSH T18661F0F7BA4642C6BD329AAB6A6F508D149417026366D5F8F6D7EC00DF88F4C40787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2