General
- Target extension-fix-ED804B.hta
- Size 3KB
- Sample260803-ksn69seq6x
- SHA256 247218bad44d5f4462bc404b3a5c45aa5d481ad67c3d665980d8dc172e607fb8
- MD5 8ebeb8ef29382fcdc44201c24bc85b8e
- SHA1 749edd2dd223829053a5f647e428b91d10da6031
- SHA512 86a2d4d0da023c9b20c0abcf8d5071ad8591581d85f1a42a19aed1b8af22afc2eb32804f2e2695f7378f66f89a867515f9d65739e607ed57310346961f1932cc
- TLSH T14E61F5F7AA4683CABC32899B6A6F109D14941A422366D4FCF2D7D801EF9CF5948743E4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-ED804B.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-ED804B.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-ED804B.hta
- Size 3KB
- SHA256 247218bad44d5f4462bc404b3a5c45aa5d481ad67c3d665980d8dc172e607fb8
- MD5 8ebeb8ef29382fcdc44201c24bc85b8e
- SHA1 749edd2dd223829053a5f647e428b91d10da6031
- SHA512 86a2d4d0da023c9b20c0abcf8d5071ad8591581d85f1a42a19aed1b8af22afc2eb32804f2e2695f7378f66f89a867515f9d65739e607ed57310346961f1932cc
- TLSH T14E61F5F7AA4683CABC32899B6A6F109D14941A422366D4FCF2D7D801EF9CF5948743E4
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.