General
- Target extension-fix-Y27ZFL.hta
- Size 3KB
- Sample260804-jg6rhay1ht
- SHA256 f84f5bb046502ca340e2c96793fdf5f43bba64d9674eaaa7899c3b9c2711f088
- MD5 7ad7216e3a2ab9a19476bfbb274b3802
- SHA1 a72f4d96e9aced6c542ca9249e7f51d0aa72c277
- SHA512 003e8ae858630f70002b547b4c60b923558bded7f1a2e884b51da18a1e71a878fe2f26985ced1d9aed12d976d526971f0a5286e4124e024a70dd0aaafc641d60
- TLSH T1DF61A9F7BA4682D5BC328A9B6A2F508D149016022376D4FCE3D7DC01DF9CE5945783A8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-Y27ZFL.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-Y27ZFL.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-Y27ZFL.hta
- Size 3KB
- SHA256 f84f5bb046502ca340e2c96793fdf5f43bba64d9674eaaa7899c3b9c2711f088
- MD5 7ad7216e3a2ab9a19476bfbb274b3802
- SHA1 a72f4d96e9aced6c542ca9249e7f51d0aa72c277
- SHA512 003e8ae858630f70002b547b4c60b923558bded7f1a2e884b51da18a1e71a878fe2f26985ced1d9aed12d976d526971f0a5286e4124e024a70dd0aaafc641d60
- TLSH T1DF61A9F7BA4682D5BC328A9B6A2F508D149016022376D4FCE3D7DC01DF9CE5945783A8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1