General
- Target extension-fix-12OYNR.zip
- Size 1KB
- Sample260803-p3kdaaztez
- SHA256 61946fa00557d1e24e927406ac52cb81cd89e4c92a3b62b3868dab0900f3ea5f
- MD5 1211a06a322aacf59ce6c92c19698a67
- SHA1 1edbb82b29d174af4117f324bb6b2c674cf4ec94
- SHA512 1b323ed8017f1ec4f208d913f3a02c9b8a00cf7dd8329eacecc3b286b0184ea98555adb0d8be1682c993ef052a93935f62e0bbd2501cd31e63cc8713145cd2e8
- TLSH T1E521EAAC976F0350E17948F958C47C78ED3E6CA50200E943329D931D1639C181F4B698
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-12OYNR.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-12OYNR.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-12OYNR.hta
- Size 3KB
- SHA256 c5d4ab87d76ed57e915f76d412da9c7958d6a9158b3860ffcc21daea23127803
- MD5 64f6746cd3558d54854026f43779a314
- SHA1 f689158fdcb6ccd367435e63fa7191e3ba71d89e
- SHA512 ca0654a291678fdaa91e7305acd3b65fc4d0de275abfa8699279a77bd74758eaf3fbe4add5427ef6951c53de753e7fc13c92d7884893356506029d64dadaa5a8
- TLSH T153619AF3795A42C6BC32999B596F508E049416422362D4F8F3E7DC00EF8DF5D45787A8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1