General
- Target extension-fix-M1R3P5.hta
- Size 2KB
- Sample260803-lv6prsgl8v
- SHA256 d6fbafcdbbd3c4ca9faa6a6f36e50b2a270b29a8ed462264a00b3ccd536fe622
- MD5 5681ac0b3506c9628e500ed37993cfd9
- SHA1 932f4d34232aff50725030b2149bacd580a69412
- SHA512 8d6746727d163b77a77bf30e3d8d5d06f089447b682552c08aacd3e1e9bd1798616e911df56638a69377a57954d7b4e8d67bbb54c7ca9c3504e4e8eeea828330
- TLSH T171511CEBBA8B17E4BC7319AF5A7F208864E807471368D4B4F2569D00AF8890D84353F8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-M1R3P5.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-M1R3P5.hta
- Size 2KB
- SHA256 d6fbafcdbbd3c4ca9faa6a6f36e50b2a270b29a8ed462264a00b3ccd536fe622
- MD5 5681ac0b3506c9628e500ed37993cfd9
- SHA1 932f4d34232aff50725030b2149bacd580a69412
- SHA512 8d6746727d163b77a77bf30e3d8d5d06f089447b682552c08aacd3e1e9bd1798616e911df56638a69377a57954d7b4e8d67bbb54c7ca9c3504e4e8eeea828330
- TLSH T171511CEBBA8B17E4BC7319AF5A7F208864E807471368D4B4F2569D00AF8890D84353F8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1