General
- Target extension-fix-QJADIY.hta
- Size 2KB
- Sample260803-lnrx2agk3y
- SHA256 6bcc6c0fa31d512d8b0970b0af2385281a613f638434634d644dff3a14a1aee5
- MD5 dfc282387445355388e014fdb8bf016e
- SHA1 fba0f2ef812fc786f3869b2b7d229e5a733dc2f9
- SHA512 4759b993d172b68cc0b84aff11130a131da3396358ffc604644614df33aa3b334e44980e00e26fca159d52798f92649a73cfa50e5a67d4e811b6ef8c8332a8b3
- TLSH T11951D9F77A8652E9BD3249EB1A2F10CC509507072324E4F8F696ED00AF8DE8985347E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-QJADIY.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-QJADIY.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-QJADIY.hta
- Size 2KB
- SHA256 6bcc6c0fa31d512d8b0970b0af2385281a613f638434634d644dff3a14a1aee5
- MD5 dfc282387445355388e014fdb8bf016e
- SHA1 fba0f2ef812fc786f3869b2b7d229e5a733dc2f9
- SHA512 4759b993d172b68cc0b84aff11130a131da3396358ffc604644614df33aa3b334e44980e00e26fca159d52798f92649a73cfa50e5a67d4e811b6ef8c8332a8b3
- TLSH T11951D9F77A8652E9BD3249EB1A2F10CC509507072324E4F8F696ED00AF8DE8985347E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1