General
- Target extension-fix-L1N3KE.hta
- Size 3KB
- Sample260803-k5llxafb84
- SHA256 c5ddf260edd91e846a58eaf068686b4d2bc31abeefbff87844f3f6d3be48a400
- MD5 b97aa073311123506955be71098c0aa6
- SHA1 857afa1acc375aa42bee0e19da17b7304b28a8ed
- SHA512 cafb58404b2a6ef5f0ae6970926351c9798211066c98ab0249fa8985663245b7960d63f5d33be21407587b402c96e308f1f8f3c75d883fd6ab3e5661824cd80d
- TLSH T19061EFF7BA4642C2BC32999B6A6F509D548417421366D0FCE7A7DC01EF8CF4A49783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-L1N3KE.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-L1N3KE.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-L1N3KE.hta
- Size 3KB
- SHA256 c5ddf260edd91e846a58eaf068686b4d2bc31abeefbff87844f3f6d3be48a400
- MD5 b97aa073311123506955be71098c0aa6
- SHA1 857afa1acc375aa42bee0e19da17b7304b28a8ed
- SHA512 cafb58404b2a6ef5f0ae6970926351c9798211066c98ab0249fa8985663245b7960d63f5d33be21407587b402c96e308f1f8f3c75d883fd6ab3e5661824cd80d
- TLSH T19061EFF7BA4642C2BC32999B6A6F509D548417421366D0FCE7A7DC01EF8CF4A49783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.