Some (or all) .hta files return the zip package. They should return the ie package instead.
Sample HTA (petya):
MD5 0487382a4daf8eb9660f1c67e30f8b25
SHA1 736752744122a0b5ee4b95ddad634dd225dc0f73
SHA256 ee29b9c01318a1e23836b949942db14d4811246fdae2f41df9f0dcd922c63bc6
Some (or all) .hta files return the
zippackage. They should return theiepackage instead.Sample HTA (petya):
MD5 0487382a4daf8eb9660f1c67e30f8b25
SHA1 736752744122a0b5ee4b95ddad634dd225dc0f73
SHA256 ee29b9c01318a1e23836b949942db14d4811246fdae2f41df9f0dcd922c63bc6