General
- Target extension-fix-000A4R.hta
- Size 3KB
- Sample260803-lt52vaff33
- SHA256 28f0bdc85ae4cea7fea5736aa6b2957aaad8018c026dbcd9d72203fbcbb01279
- MD5 28af0746f54fc5fde9d91735194d983d
- SHA1 7a8e6c371d3e98213e7afb7cd1c9b573287e3ea8
- SHA512 c4e883a6e2008f6a341357e81215d30eb3e5687d2e6a89c5f593d1fc287bd126e61c84ed6727734a10cbd7c35739920ad0eba20f6b627e815fb292a8fa25404b
- TLSH T11B61EFF7B94A52C5BC329A9B1E6F408D04941B022366D4F8F297DC01EF8DE9981787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-000A4R.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-000A4R.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-000A4R.hta
- Size 3KB
- SHA256 28f0bdc85ae4cea7fea5736aa6b2957aaad8018c026dbcd9d72203fbcbb01279
- MD5 28af0746f54fc5fde9d91735194d983d
- SHA1 7a8e6c371d3e98213e7afb7cd1c9b573287e3ea8
- SHA512 c4e883a6e2008f6a341357e81215d30eb3e5687d2e6a89c5f593d1fc287bd126e61c84ed6727734a10cbd7c35739920ad0eba20f6b627e815fb292a8fa25404b
- TLSH T11B61EFF7B94A52C5BC329A9B1E6F408D04941B022366D4F8F297DC01EF8DE9981787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1