General
- Target extension-fix-OA1OIV.hta
- Size 3KB
- Sample260803-k3armavwdy
- SHA256 5920ce60e0f08a804393ad1acaccf664ee1edd075377c1a4dc7d137e4365c16b
- MD5 6ca83552165537bcdbc3f884045e734b
- SHA1 5923c9e4bc10aae22bced70861bf027504530893
- SHA512 13eaa90a837cba1ec9ca84a043bdd9e123861f583c067501a9c7295320974f6d355fac00f51ccc498d952d919a3e0528a4c503a10f374cfe52ff9f740c45ff64
- TLSH T1CD61CDF7BA4652C6BC318AAB2A2F509D14941B021366E5FCE797EC01DF8DE4D44783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-OA1OIV.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-OA1OIV.hta
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-OA1OIV.hta
- Size 3KB
- SHA256 5920ce60e0f08a804393ad1acaccf664ee1edd075377c1a4dc7d137e4365c16b
- MD5 6ca83552165537bcdbc3f884045e734b
- SHA1 5923c9e4bc10aae22bced70861bf027504530893
- SHA512 13eaa90a837cba1ec9ca84a043bdd9e123861f583c067501a9c7295320974f6d355fac00f51ccc498d952d919a3e0528a4c503a10f374cfe52ff9f740c45ff64
- TLSH T1CD61CDF7BA4652C6BC318AAB2A2F509D14941B021366E5FCE797EC01DF8DE4D44783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.