General
- Target extension-fix-83TXIN.hta
- Size 2KB
- Sample260803-k9aefafm7w
- SHA256 0e1409a030e596c8522a735929eb64e96d85408c67b956e07f121b5d7dbbd911
- MD5 33c4c8c8675491cd160dbaac71ad3bbc
- SHA1 09764f134d2232bff68741dd13240f8828db8ca2
- SHA512 984e6c6d22725d933adc952d43147b6e9b0883ac79a8ee0bfdce880c6073a08f35126ca55150e8cc48e110fd516c51ed55e417acd224b56ec1f86f705d38e1ea
- TLSH T1D95133E7B95242C6BC328EDB2A7F519910941A42132AE4F8F697ED40EF8CF4944743E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-83TXIN.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-83TXIN.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-83TXIN.hta
- Size 2KB
- SHA256 0e1409a030e596c8522a735929eb64e96d85408c67b956e07f121b5d7dbbd911
- MD5 33c4c8c8675491cd160dbaac71ad3bbc
- SHA1 09764f134d2232bff68741dd13240f8828db8ca2
- SHA512 984e6c6d22725d933adc952d43147b6e9b0883ac79a8ee0bfdce880c6073a08f35126ca55150e8cc48e110fd516c51ed55e417acd224b56ec1f86f705d38e1ea
- TLSH T1D95133E7B95242C6BC328EDB2A7F519910941A42132AE4F8F697ED40EF8CF4944743E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.