General
- Target extension-fix-ACPQ62.hta
- Size 3KB
- Sample260803-lyafqsgm2z
- SHA256 d372b11dc39b69d792ed54a4654b37f317facbc238b5d1fe15997bed89d89ff4
- MD5 d00f249715d75a399b9f44b7b4e9e16b
- SHA1 ee44688d0aa130ec2409975ab25d3922c8f7d21e
- SHA512 a39e7b8d224b5931fe546b485117436fd8f97e6e994d3fe2943e812d004bc7474711bbf2727347a9b13e1ec71f923db1e5e4f620696e68e89d3ab17441825ea2
- TLSH T15F5167F7BA4662C5BD328AAB6A2F418D10D817071362D8F8F696DC00AF8DE5D45347E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-ACPQ62.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-ACPQ62.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-ACPQ62.hta
- Size 3KB
- SHA256 d372b11dc39b69d792ed54a4654b37f317facbc238b5d1fe15997bed89d89ff4
- MD5 d00f249715d75a399b9f44b7b4e9e16b
- SHA1 ee44688d0aa130ec2409975ab25d3922c8f7d21e
- SHA512 a39e7b8d224b5931fe546b485117436fd8f97e6e994d3fe2943e812d004bc7474711bbf2727347a9b13e1ec71f923db1e5e4f620696e68e89d3ab17441825ea2
- TLSH T15F5167F7BA4662C5BD328AAB6A2F418D10D817071362D8F8F696DC00AF8DE5D45347E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1