General
- Target extension-fix-FXR89X.hta
- Size 2KB
- Sample260803-ltpd4afe94
- SHA256 656a50ed94f33ff5f4a869bfc6b415bbed629db92673273bcba85c1d1cccca9b
- MD5 6aa916d493bf734342cb26acbf91eeab
- SHA1 431778a1287aa88ef76531e6feeaac3ba5f6a3df
- SHA512 50a0d4cb9202ec457d61dd2bb300d30f518e68de4333c4621553bbc099d0e4b372103d99eb9a7a793e6d382196f9240e1bf6eb9875a45aa615e8a92293bdfe85
- TLSH T1F85123F7BA4642C6BD3289AB5A2F51CD10841A422366E4FCF396DC01EF8CE8945743E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-FXR89X.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-FXR89X.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-FXR89X.hta
- Size 2KB
- SHA256 656a50ed94f33ff5f4a869bfc6b415bbed629db92673273bcba85c1d1cccca9b
- MD5 6aa916d493bf734342cb26acbf91eeab
- SHA1 431778a1287aa88ef76531e6feeaac3ba5f6a3df
- SHA512 50a0d4cb9202ec457d61dd2bb300d30f518e68de4333c4621553bbc099d0e4b372103d99eb9a7a793e6d382196f9240e1bf6eb9875a45aa615e8a92293bdfe85
- TLSH T1F85123F7BA4642C6BD3289AB5A2F51CD10841A422366E4FCF396DC01EF8CE8945743E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1