General
- Target extension-fix-Q1BVXD.hta
- Size 2KB
- Sample260803-lqeqgstflc
- SHA256 c88c0f1b22dabb91ae86085221f6c060855dc9f3834bf18b7def7f499a25e6c1
- MD5 ee44726c978fec6cdeafe54bc452a486
- SHA1 3e50aa3709ad1e50571c3e1b4bc1fd3d181ab4dd
- SHA512 d20b1e9055fce0d6a3166c0982c296935cfad2ff7dca199644983693629207a1d28a892bb1d153e2ca07ad3c50d7a60c2b05dad2ed7e73585a7a027d333ca7ea
- TLSH T1A15178F7B98653D5BC32999B1A2F508928941A422362D4F8F3D3DC00EF8CF5A85783D4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-Q1BVXD.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-Q1BVXD.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-Q1BVXD.hta
- Size 2KB
- SHA256 c88c0f1b22dabb91ae86085221f6c060855dc9f3834bf18b7def7f499a25e6c1
- MD5 ee44726c978fec6cdeafe54bc452a486
- SHA1 3e50aa3709ad1e50571c3e1b4bc1fd3d181ab4dd
- SHA512 d20b1e9055fce0d6a3166c0982c296935cfad2ff7dca199644983693629207a1d28a892bb1d153e2ca07ad3c50d7a60c2b05dad2ed7e73585a7a027d333ca7ea
- TLSH T1A15178F7B98653D5BC32999B1A2F508928941A422362D4F8F3D3DC00EF8CF5A85783D4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1