General
- Target extension-fix-X6UL2J.hta
- Size 2KB
- Sample260803-lryjzstfna
- SHA256 b41dc580d671769d0aee56044fd0b09ea90e52ddaebb79dbb023bc766d39e091
- MD5 294459bef00e291fb41fb33e9259792b
- SHA1 73425ccf57efa34aeb9d5d7d47053eae0f031842
- SHA512 db2e9b06eab0de6a7aea07a7789396dbac37eb7add2de39ede38cdcdc073ebbc283357fb4ea4a1aa81aa91afb95f6b3cdf29cc6baffc6e082436c0185c62e786
- TLSH T1CA518BFB7A4652E5BD329AEB2A2F008D549457022766D1F8F787DC40EF8CE0980743E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-X6UL2J.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-X6UL2J.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-X6UL2J.hta
- Size 2KB
- SHA256 b41dc580d671769d0aee56044fd0b09ea90e52ddaebb79dbb023bc766d39e091
- MD5 294459bef00e291fb41fb33e9259792b
- SHA1 73425ccf57efa34aeb9d5d7d47053eae0f031842
- SHA512 db2e9b06eab0de6a7aea07a7789396dbac37eb7add2de39ede38cdcdc073ebbc283357fb4ea4a1aa81aa91afb95f6b3cdf29cc6baffc6e082436c0185c62e786
- TLSH T1CA518BFB7A4652E5BD329AEB2A2F008D549457022766D1F8F787DC40EF8CE0980743E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2