General
- Target extension-fix-FR9287.hta
- Size 2KB
- Sample260803-klb85asapg
- SHA256 5cefbef862cf210337947c7e29659645b6f9a25f5acc121e4ef74450824f8143
- MD5 30f9a8eba851ce11876912ba5b482283
- SHA1 aa7c408ddfad9a9ade6e8f7426a11348057a6566
- SHA512 043e5d4f2690649ae4985699f378602c6aad4c8f1fbb333748f0b3f80cfbc66a8a3e749b4b9f0d02aba57d524e27fcc6f54b106359eee8eb079d92656517ad1a
- TLSH T1855143F7794A42C6BC3159AB2A2F509E00A457431366E5F8F6E7ED00DF88E4944783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-FR9287.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-FR9287.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-FR9287.hta
- Size 2KB
- SHA256 5cefbef862cf210337947c7e29659645b6f9a25f5acc121e4ef74450824f8143
- MD5 30f9a8eba851ce11876912ba5b482283
- SHA1 aa7c408ddfad9a9ade6e8f7426a11348057a6566
- SHA512 043e5d4f2690649ae4985699f378602c6aad4c8f1fbb333748f0b3f80cfbc66a8a3e749b4b9f0d02aba57d524e27fcc6f54b106359eee8eb079d92656517ad1a
- TLSH T1855143F7794A42C6BC3159AB2A2F509E00A457431366E5F8F6E7ED00DF88E4944783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.