General
- Target extension-fix-DHD0ZG.hta
- Size 2KB
- Sample260803-ls6xrafe78
- SHA256 5985bc0482ee65d630ade5ca3e2a11b955eadf999946d0cd0bdc61f5b7dfce6d
- MD5 6433801c0bbd40e916a4fb622d41a742
- SHA1 921f263466d0c1468e238bbb01d53815846d52c4
- SHA512 76a6672ffe37b9d6f0ff0393e66acb8f99f931728720c9016d46695a57eda65fd14a5f18a332ee86a5cf7fb21b6ef7607809796abc875ce4ea67fd4cf0267aca
- TLSH T1255175FBBE8653C5BC324AAB5B3F1089149457071365D0F8F6AADC04AF88E4981387E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-DHD0ZG.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-DHD0ZG.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-DHD0ZG.hta
- Size 2KB
- SHA256 5985bc0482ee65d630ade5ca3e2a11b955eadf999946d0cd0bdc61f5b7dfce6d
- MD5 6433801c0bbd40e916a4fb622d41a742
- SHA1 921f263466d0c1468e238bbb01d53815846d52c4
- SHA512 76a6672ffe37b9d6f0ff0393e66acb8f99f931728720c9016d46695a57eda65fd14a5f18a332ee86a5cf7fb21b6ef7607809796abc875ce4ea67fd4cf0267aca
- TLSH T1255175FBBE8653C5BC324AAB5B3F1089149457071365D0F8F6AADC04AF88E4981387E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1