General
- Target extension-fix-X9FW8T.hta
- Size 3KB
- Sample260803-knmgwasbnf
- SHA256 46ece5826125ed3efdc6720f1572f642d4c3fc96ffdcabab84fe9c484ce1d21e
- MD5 33a271a624bbb7e090f454f6886a5a21
- SHA1 e50e34d120e0834aebca2d48e457436fb2b4d5c7
- SHA512 efa94bfde6b7067325454c49f80bf8cab6f1450a95cca83d40936d95837bda4c59905537925a31c9b66f6af4962b65717aae5d405912625aea5e84964cda26c4
- TLSH T14D61BBF77A4682D2BD319A9B2E2F408E64905B021376D4FCE2D6DC00EF8CE5944B87D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-X9FW8T.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-X9FW8T.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-X9FW8T.hta
- Size 3KB
- SHA256 46ece5826125ed3efdc6720f1572f642d4c3fc96ffdcabab84fe9c484ce1d21e
- MD5 33a271a624bbb7e090f454f6886a5a21
- SHA1 e50e34d120e0834aebca2d48e457436fb2b4d5c7
- SHA512 efa94bfde6b7067325454c49f80bf8cab6f1450a95cca83d40936d95837bda4c59905537925a31c9b66f6af4962b65717aae5d405912625aea5e84964cda26c4
- TLSH T14D61BBF77A4682D2BD319A9B2E2F408E64905B021376D4FCE2D6DC00EF8CE5944B87D8
- MD5 SHA1 SHA512 TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.