General
- Target extension-fix-ED804B.hta
- Size 3KB
- Sample260803-ksn69seq6x
- SHA256 247218bad44d5f4462bc404b3a5c45aa5d481ad67c3d665980d8dc172e607fb8
- MD5 8ebeb8ef29382fcdc44201c24bc85b8e
- SHA1 749edd2dd223829053a5f647e428b91d10da6031
- SHA512 86a2d4d0da023c9b20c0abcf8d5071ad8591581d85f1a42a19aed1b8af22afc2eb32804f2e2695f7378f66f89a867515f9d65739e607ed57310346961f1932cc
- TLSH T14E61F5F7AA4683CABC32899B6A6F109D14941A422366D4FCF2D7D801EF9CF5948743E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-ED804B.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-ED804B.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-ED804B.hta
- Size 3KB
- SHA256 247218bad44d5f4462bc404b3a5c45aa5d481ad67c3d665980d8dc172e607fb8
- MD5 8ebeb8ef29382fcdc44201c24bc85b8e
- SHA1 749edd2dd223829053a5f647e428b91d10da6031
- SHA512 86a2d4d0da023c9b20c0abcf8d5071ad8591581d85f1a42a19aed1b8af22afc2eb32804f2e2695f7378f66f89a867515f9d65739e607ed57310346961f1932cc
- TLSH T14E61F5F7AA4683CABC32899B6A6F109D14941A422366D4FCF2D7D801EF9CF5948743E4
- MD5 SHA1 SHA512 TLSH
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.