Analyzing a Malicious Compiled HTML Help File Delivering Agent Tesla

Reported 23 Apr 2026 by otx · Severity: medium

This analysis examines an attack chain utilizing malicious compiled HTML help (.chm) files for initial payload delivery. The attack begins with a 7zip compressed file containing a weaponized CHM file that displays a decoy window while executing obfuscated JavaScript code. This Ja