General
- Target extension-fix-04520J.hta
- Size 3KB
- Sample260803-k652yafb99
- SHA256 05ba0aadafa96c69dcc82bbfdeb9d38a9116fe8185ccbfbc1ea9cd9d99e962a4
- MD5 4c88574a0891c2478f0b1ea927cfebe6
- SHA1 6975e8380e5ca6fb3e3d2bf9e3a9cc1e2a0c5d79
- SHA512 4eb78fc876eba133c5c64d3aa3dd63a0dd1566392261a8f39b026328c2c88dcda3d4fd6b7d89c4b2d3da04ea642428d19b0dba590e8ce1c8e3274a57327dd961
- TLSH T17361A8FB794652D6BD72AA9B1A2F50CE449117022326E4B8E396EC00EF89F5C4178788
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-04520J.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-04520J.hta
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-04520J.hta
- Size 3KB
- SHA256 05ba0aadafa96c69dcc82bbfdeb9d38a9116fe8185ccbfbc1ea9cd9d99e962a4
- MD5 4c88574a0891c2478f0b1ea927cfebe6
- SHA1 6975e8380e5ca6fb3e3d2bf9e3a9cc1e2a0c5d79
- SHA512 4eb78fc876eba133c5c64d3aa3dd63a0dd1566392261a8f39b026328c2c88dcda3d4fd6b7d89c4b2d3da04ea642428d19b0dba590e8ce1c8e3274a57327dd961
- TLSH T17361A8FB794652D6BD72AA9B1A2F50CE449117022326E4B8E396EC00EF89F5C4178788
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.