General
- Target extension-fix-3TAN95.hta
- Size 3KB
- Sample260803-kpcztsvsby
- SHA256 dd14e89f4a85bd2b1e5aa839290a8a588393af4342f7436ca78729dd7832a11e
- MD5 1cf0432479e21fc42b6e3ec2738b51c1
- SHA1 9494f9c51d8f2244b778f723b6f5ae58eb9e09a9
- SHA512 21c77025dec28f3828ed9a98fc553978989afde364bdee44115c98694f168e7d0a503b89fd532083ad8b2f018d22eac3056e6a8cf0fbcdb28c1b2ef2972d0a48
- TLSH T1EB61DDF7B94A51C6BC329A9B2B6F60CD449057061362D4F8F296EC00EF89F4981787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-3TAN95.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-3TAN95.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-3TAN95.hta
- Size 3KB
- SHA256 dd14e89f4a85bd2b1e5aa839290a8a588393af4342f7436ca78729dd7832a11e
- MD5 1cf0432479e21fc42b6e3ec2738b51c1
- SHA1 9494f9c51d8f2244b778f723b6f5ae58eb9e09a9
- SHA512 21c77025dec28f3828ed9a98fc553978989afde364bdee44115c98694f168e7d0a503b89fd532083ad8b2f018d22eac3056e6a8cf0fbcdb28c1b2ef2972d0a48
- TLSH T1EB61DDF7B94A51C6BC329A9B2B6F60CD449057061362D4F8F296EC00EF89F4981787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.