General
- Target extension-fix-Q6KOQN.hta
- Size 2KB
- Sample260803-ksr8xsscpg
- SHA256 eec403b11d67f5c632cfd47f1d4774d7f838a69dae163a7091714afc804c9fc7
- MD5 45050b33821999cf69a30031c67353aa
- SHA1 b3678222522d85fa8c76ec9a437489ece6b05bf8
- SHA512 2b0e9dae50066f99cd472f4e2cc54a73cc54f518d2bfa83b4430faa9fe1884eecb3df5672bd5dfd961f49800cb20b994d7438c81d4e328744fff3c5429a60445
- TLSH T1925188F77A4653C2BC3249AF6B2F608D1494064727A6D4B8F697EC00EF98F4984743E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-Q6KOQN.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-Q6KOQN.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-Q6KOQN.hta
- Size 2KB
- SHA256 eec403b11d67f5c632cfd47f1d4774d7f838a69dae163a7091714afc804c9fc7
- MD5 45050b33821999cf69a30031c67353aa
- SHA1 b3678222522d85fa8c76ec9a437489ece6b05bf8
- SHA512 2b0e9dae50066f99cd472f4e2cc54a73cc54f518d2bfa83b4430faa9fe1884eecb3df5672bd5dfd961f49800cb20b994d7438c81d4e328744fff3c5429a60445
- TLSH T1925188F77A4653C2BC3249AF6B2F608D1494064727A6D4B8F697EC00EF98F4984743E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.