General
- Target extension-fix-W1WUT8.zip
- Size 1KB
- Sample260803-p3dwhaybre
- SHA256 24181ed5424b65dc71c9773c22a105da15ae4b4ae1f264c2af1e57c6fdd7a417
- MD5 e5bebd3fc63113cc037e5c8dc957c187
- SHA1 8bdbf17b548329834ea67a8b4dfce319c96e9dd5
- SHA512 95b92f29efc1acdb49f9ab1ee49af90cd1b1a5af9c1b4bae0ecd0d5fec27b8ba085d3623f16497ac0745d1ce32da3c910cb26b91b98d1fd5e5a8db41b614ff25
- TLSH T10F2195F28DAE16F5E2E58AFB807A0940715CC68040DD1110DA88EBCD2D3B89BBB8F418
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-W1WUT8.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-W1WUT8.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-W1WUT8.hta
- Size 3KB
- SHA256 b09ad205758187e73988d9b8a7521508b7c66701067b84e6a2dc2dc5fc63c3c8
- MD5 d8582ca158420ba317cec6a891335d83
- SHA1 cff0b53c9b6830a63dd58ffa29efc84b30f021ad
- SHA512 3703389c8a845a7c2d2cd9d22a6eeb42b7260c8e9e04140183543dc833746b253eaba2782ca49873bfa4b55940cbbe84c7da3745627e174982711eb9a48f16ab
- TLSH T1B351F1F3BA4652C6BC328AAB1A6F508D149417021372E5F8F6D7ED01EF88E4945783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1