General
- Target extension-fix-SL2V82.hta
- Size 3KB
- Sample260804-jg55zay1hs
- SHA256 e603c67e28c8a8dadf33bef94ad36312572ffeab997626af1450507a4a53ae52
- MD5 41d16bb3f2fc77797f93a75039b48400
- SHA1 b6378d60f686746ab7900ed51fd731e933d4a5e3
- SHA512 5e669220325a76a6812b995d38687f2a2ac66c27ba7db453dd742f9a5f612c9cdf5f0c650ff394a66aee0b69605638261dc3f4797e5d24d7793e041dc0f441e1
- TLSH T1D861C9F77A4692C6BC3299AB5A2F509D04901B022366E8F8E7D7DC01EF8CE5940783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-SL2V82.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-SL2V82.hta
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-SL2V82.hta
- Size 3KB
- SHA256 e603c67e28c8a8dadf33bef94ad36312572ffeab997626af1450507a4a53ae52
- MD5 41d16bb3f2fc77797f93a75039b48400
- SHA1 b6378d60f686746ab7900ed51fd731e933d4a5e3
- SHA512 5e669220325a76a6812b995d38687f2a2ac66c27ba7db453dd742f9a5f612c9cdf5f0c650ff394a66aee0b69605638261dc3f4797e5d24d7793e041dc0f441e1
- TLSH T1D861C9F77A4692C6BC3299AB5A2F509D04901B022366E8F8E7D7DC01EF8CE5940783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1