General
- Target extension-fix-ZN7HUS.hta
- Size 3KB
- Sample260731-qlcgsatdrc
- SHA256 bdfde60e395db36506ed425df3fad262734357041e8fa3ad30bfb25e44d2957b
- MD5 920b70ab3898b7d2fa3e8f6d331c1a64
- SHA1 766dda32d013d8fee750b413deb3a370661246aa
- SHA512 1fd0bc93ca2e5ac54cf24a0285c1f83dd823361536bb8fcb22adeda442f72925cf9e774a2838d71b80805f104a10759282bd4b3b8556431b0c6c52690ccb374f
- TLSH T1C351DDF7B54662D6BC329AAB1E6F51DE449417022326E0F8F79ADC40DF88F094035398
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-ZN7HUS.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-ZN7HUS.hta
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-ZN7HUS.hta
- Size 3KB
- SHA256 bdfde60e395db36506ed425df3fad262734357041e8fa3ad30bfb25e44d2957b
- MD5 920b70ab3898b7d2fa3e8f6d331c1a64
- SHA1 766dda32d013d8fee750b413deb3a370661246aa
- SHA512 1fd0bc93ca2e5ac54cf24a0285c1f83dd823361536bb8fcb22adeda442f72925cf9e774a2838d71b80805f104a10759282bd4b3b8556431b0c6c52690ccb374f
- TLSH T1C351DDF7B54662D6BC329AAB1E6F51DE449417022326E0F8F79ADC40DF88F094035398
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.