General
- Target extension-fix-RMMR7P.hta
- Size 3KB
- Sample260803-ls7jaafe79
- SHA256 16c36118e229cd201ed15ec8d779d424ae0e95f4f5391632b41b3100be6eeefe
- MD5 902156a142298fa835be8c88e8960b2a
- SHA1 5cf501f85f3fb7b16c3b74f064c976a282089d3f
- SHA512 017a383a0166eb94a0fb4ad7af3a489f82d8e4b46df0aaf9b3b6dd364d48a3784dea5f55336524f412ec8ae59fc59aaa651f6865598ab00d6d4fb480c2b709ff
- TLSH T14D6166F7BA8642C2BC3299AB6A2F518950941B422762D0F8F293DC01DF8CE4E45747E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-RMMR7P.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-RMMR7P.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-RMMR7P.hta
- Size 3KB
- SHA256 16c36118e229cd201ed15ec8d779d424ae0e95f4f5391632b41b3100be6eeefe
- MD5 902156a142298fa835be8c88e8960b2a
- SHA1 5cf501f85f3fb7b16c3b74f064c976a282089d3f
- SHA512 017a383a0166eb94a0fb4ad7af3a489f82d8e4b46df0aaf9b3b6dd364d48a3784dea5f55336524f412ec8ae59fc59aaa651f6865598ab00d6d4fb480c2b709ff
- TLSH T14D6166F7BA8642C2BC3299AB6A2F518950941B422762D0F8F293DC01DF8CE4E45747E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1