General
- Target extension-fix-WM6N81.hta
- Size 3KB
- Sample260803-ls1qqstgja
- SHA256 05d17a12b7cb3b015238255434514c92f05f34f2d399919c1d6a6f3d4ad3bdfa
- MD5 d3b5e86cc38ae8a31a7c3fac800e576d
- SHA1 b12b6d02838a97e4662715083acf55e06d562b94
- SHA512 336c4856d7e3b02ac0ca0d4e37f31b32617f0820a7bae2e0447b275bc16961a56d174c412c76dee86a67c4601dca62c85c9d3bd4b29b1c714ff5d9a96b03b5b2
- TLSH T13D61ABF77A4A52D2BC318ADB5A2F908D449016126366D0F8F797EC01EF8DE8D44B87D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-WM6N81.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-WM6N81.hta
- Size 3KB
- SHA256 05d17a12b7cb3b015238255434514c92f05f34f2d399919c1d6a6f3d4ad3bdfa
- MD5 d3b5e86cc38ae8a31a7c3fac800e576d
- SHA1 b12b6d02838a97e4662715083acf55e06d562b94
- SHA512 336c4856d7e3b02ac0ca0d4e37f31b32617f0820a7bae2e0447b275bc16961a56d174c412c76dee86a67c4601dca62c85c9d3bd4b29b1c714ff5d9a96b03b5b2
- TLSH T13D61ABF77A4A52D2BC318ADB5A2F908D449016126366D0F8F797EC01EF8DE8D44B87D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1