General
- Target extension-fix-9IDV4W.hta
- Size 3KB
- Sample260803-lt8gzaff34
- SHA256 e14ab1e0abaeb75c9bab804330353265f03c9504423361f46cb653c1412efd5e
- MD5 70b0cbae5e307f1d0783b5fd43ea0819
- SHA1 47a7d59b0bc1c437727dd9e037ee87fdd2451e3d
- SHA512 48adcd9a825649a4bce64e266d389e9116239a47bebd7d4f08f34ee361d8b4d387452d35589083022c100c9fc59c6eb736f2786fa230ff12efbf4a253bc5fb04
- TLSH T13E6148F7BA4683C5BC3289AF6A2F609854941A532366D4BCF693DC00EF8DE4A44747D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-9IDV4W.hta
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-9IDV4W.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-9IDV4W.hta
- Size 3KB
- SHA256 e14ab1e0abaeb75c9bab804330353265f03c9504423361f46cb653c1412efd5e
- MD5 70b0cbae5e307f1d0783b5fd43ea0819
- SHA1 47a7d59b0bc1c437727dd9e037ee87fdd2451e3d
- SHA512 48adcd9a825649a4bce64e266d389e9116239a47bebd7d4f08f34ee361d8b4d387452d35589083022c100c9fc59c6eb736f2786fa230ff12efbf4a253bc5fb04
- TLSH T13E6148F7BA4683C5BC3289AF6A2F609854941A532366D4BCF693DC00EF8DE4A44747D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2