General
- Target extension-fix-PKOJ60.hta
- Size 3KB
- Sample260803-k1zyqsfb29
- SHA256 2e485c3d7b86eabd4ac5b91dfdcf3cad687e9f844b50890a8433bcea8047acdf
- MD5 2feeb423b52e27e8391774ae82177554
- SHA1 ed4b80ab3158b5d9f048666af2dae33a8a1270f0
- SHA512 68d00f5d1e1b038f9bf40a17bcc93a9a08cc7ff3cbc237b73681703e04917efe81741270538861fa4143109865dcbc62ccab3f205a4892be335818d58586cd2b
- TLSH T1435123F7BA4682C6BD3289AB1A2F50CD149417022366D4F8F3DADC01EF99E5944747E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-PKOJ60.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-PKOJ60.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-PKOJ60.hta
- Size 3KB
- SHA256 2e485c3d7b86eabd4ac5b91dfdcf3cad687e9f844b50890a8433bcea8047acdf
- MD5 2feeb423b52e27e8391774ae82177554
- SHA1 ed4b80ab3158b5d9f048666af2dae33a8a1270f0
- SHA512 68d00f5d1e1b038f9bf40a17bcc93a9a08cc7ff3cbc237b73681703e04917efe81741270538861fa4143109865dcbc62ccab3f205a4892be335818d58586cd2b
- TLSH T1435123F7BA4682C6BD3289AB1A2F50CD149417022366D4F8F3DADC01EF99E5944747E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.