General
- Target extension-fix-BAIMOD.hta
- Size 3KB
- Sample260803-ltk2nstgjf
- SHA256 69f5c9ef6e0a093fa84ff7d1767f5654656935ff91ed6a7db3ffd3585c8fa2d7
- MD5 a2ac6bb5c73c28324df681a8ba3b1701
- SHA1 6d6d198cfe05b4cc3d832c8cf3e0737e69471cdc
- SHA512 8eee923ea559224aac614169599c74f0c7ff3f1dd6d7d60cc9ef837d28a2b667cdadfe2f0449644316efc964e0876f34c473528965ceb4f3f25bb61eff443368
- TLSH T1A0510CF7B94A52D5BD3289AB0A6F40CE549007465322E4F8E3E6EC41EF8DF8944787D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-BAIMOD.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-BAIMOD.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-BAIMOD.hta
- Size 3KB
- SHA256 69f5c9ef6e0a093fa84ff7d1767f5654656935ff91ed6a7db3ffd3585c8fa2d7
- MD5 a2ac6bb5c73c28324df681a8ba3b1701
- SHA1 6d6d198cfe05b4cc3d832c8cf3e0737e69471cdc
- SHA512 8eee923ea559224aac614169599c74f0c7ff3f1dd6d7d60cc9ef837d28a2b667cdadfe2f0449644316efc964e0876f34c473528965ceb4f3f25bb61eff443368
- TLSH T1A0510CF7B94A52D5BD3289AB0A6F40CE549007465322E4F8E3E6EC41EF8DF8944787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1