General
- Target extension-fix-SISDLM.hta
- Size 3KB
- Sample260803-ltql6afe95
- SHA256 74bdaa7077996ec9f718977292ba5e3e7a4999f76cd71271c89c32a579eace51
- MD5 0a01f230fb7b41649e462f49b2d7a3ef
- SHA1 05593125cc755b8678149c51c61a1dabbeaa8605
- SHA512 452e9ea5982817468851ddf5b18035628e1443f09995cc7267e8ae70fe22446b9a6b00d0393b14ac5d6b2751957f19650c2b3525e3c380ddb4e68391417415a2
- TLSH T16B612FFBB90A51D6BD32999B0A2F908E449017021326E4B8F7D6DC01EF8CF5D81B87D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-SISDLM.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-SISDLM.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-SISDLM.hta
- Size 3KB
- SHA256 74bdaa7077996ec9f718977292ba5e3e7a4999f76cd71271c89c32a579eace51
- MD5 0a01f230fb7b41649e462f49b2d7a3ef
- SHA1 05593125cc755b8678149c51c61a1dabbeaa8605
- SHA512 452e9ea5982817468851ddf5b18035628e1443f09995cc7267e8ae70fe22446b9a6b00d0393b14ac5d6b2751957f19650c2b3525e3c380ddb4e68391417415a2
- TLSH T16B612FFBB90A51D6BD32999B0A2F908E449017021326E4B8F7D6DC01EF8CF5D81B87D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1