General
- Target extension-fix-OL7VBS.hta
- Size 2KB
- Sample260803-lwc4vaff57
- SHA256 a673fd24007c2d01cac941e77669f51c3861fae9aff550367065a762ce90cd53
- MD5 e99804ecb20a88cecce6767a2fd5b99d
- SHA1 83cf73254209617eca17ac4df7839a19e1458615
- SHA512 f75133f3ed204852e817b7e2752fa02fa61e3e42930ff351a3426184b9cd4737d4a3eeaaf3040d027b8296f3b17e7674b7fc4b81d3d88cb5cf9a1b3d756c3d21
- TLSH T18851ABF7B94663D5BC32899F2A7F508D60941B432365E0B8F697DC00AF9CE4944783D4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-OL7VBS.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-OL7VBS.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-OL7VBS.hta
- Size 2KB
- SHA256 a673fd24007c2d01cac941e77669f51c3861fae9aff550367065a762ce90cd53
- MD5 e99804ecb20a88cecce6767a2fd5b99d
- SHA1 83cf73254209617eca17ac4df7839a19e1458615
- SHA512 f75133f3ed204852e817b7e2752fa02fa61e3e42930ff351a3426184b9cd4737d4a3eeaaf3040d027b8296f3b17e7674b7fc4b81d3d88cb5cf9a1b3d756c3d21
- TLSH T18851ABF7B94663D5BC32899F2A7F508D60941B432365E0B8F697DC00AF9CE4944783D4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1