3efd5b38ba9b1e9680a6ea11496884ecfc02965ccd45c1dbf3ce5bc5894c7848

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 09:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
extension-fix-4GAA9T.hta
Size 3KB
Sample260803-ltws6sfe98
SHA256 3efd5b38ba9b1e9680a6ea11496884ecfc02965ccd45c1dbf3ce5bc5894c7848
MD5 ccbfc7e7b03d2f52eba58f5a5ab8168f
SHA1 69ca977bf356e2be3ae7d53963bb6dc1745a4fbb
SHA512 8c21b70eb853034b2310b1f7486f2556ac1aa7d8f032d2e0379f9d86b72cbed024f93ed8540fc532bbfc4bec35163e357d5011c37ffb95e27a8145ac7b7a7eaf
TLSH
T14951CCEBB94B52D5BC725AAF2B6F808D00E546031365E0F8F696DC00EF98E4941787EC
MD5 SHA1 SHA512 TLSH

Score

8^/10

discovery

Malware Config

Signatures

Badlisted process makes network request 2 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
3	5644	mshta.exe
8	5644	mshta.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\extension-fix-4GAA9T.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- Badlisted process makes network request
- System Location Discovery: System Language Discovery
PID:5644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads