General
- Target extension-fix-NFXYT7.hta
- Size 2KB
- Sample260803-lq8csswvf1
- SHA256 fd3a5f43f5799174976bbb96ce17fd4ec1716636409362cda4f23c34b33a9526
- MD5 f63093c4081e65846826ea266abf3680
- SHA1 6743ac4ea0eccf4a3b8b7771a2ba5759988057e1
- SHA512 11b4f77dca0672e11cb9a508c5415d23d0ff9405cbe7d85d258a2e5cd6f18e5f4b23998718160ae242af3c41e7f8202ebd6ad96c330169da088dcb9caf25e263
- TLSH T1335124F7A98947C9BC314A9B6A2F508D548407026366D0F8F2E7DC00DF8CF5A44787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-NFXYT7.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-NFXYT7.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-NFXYT7.hta
- Size 2KB
- SHA256 fd3a5f43f5799174976bbb96ce17fd4ec1716636409362cda4f23c34b33a9526
- MD5 f63093c4081e65846826ea266abf3680
- SHA1 6743ac4ea0eccf4a3b8b7771a2ba5759988057e1
- SHA512 11b4f77dca0672e11cb9a508c5415d23d0ff9405cbe7d85d258a2e5cd6f18e5f4b23998718160ae242af3c41e7f8202ebd6ad96c330169da088dcb9caf25e263
- TLSH T1335124F7A98947C9BC314A9B6A2F508D548407026366D0F8F2E7DC00DF8CF5A44787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1