General
- Target extension-fix-LGF6HW.hta
- Size 3KB
- Sample260803-ktsabavtcs
- SHA256 e815c504be88f6e201934e2e470384978784b5661fe2fa66e5a16300474c559f
- MD5 7ac1c971e8d1037b3cb760f1a4913f7b
- SHA1 17039b0a28dd2f56b88302681ce4f4754808f35f
- SHA512 3350baac578564181cb4948dbd3762d81588da821c1c1b8b3584a799a0aeaeb23c8538ac060e05df53abe0a289fe767cbf6427b2c00ce26e3ab3ea9b20a96a48
- TLSH T13761DDF7BA4252C6BC3199ABAA2F509D108417022366D0FCF6D7DD01DF88F5984783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-LGF6HW.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-LGF6HW.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-LGF6HW.hta
- Size 3KB
- SHA256 e815c504be88f6e201934e2e470384978784b5661fe2fa66e5a16300474c559f
- MD5 7ac1c971e8d1037b3cb760f1a4913f7b
- SHA1 17039b0a28dd2f56b88302681ce4f4754808f35f
- SHA512 3350baac578564181cb4948dbd3762d81588da821c1c1b8b3584a799a0aeaeb23c8538ac060e05df53abe0a289fe767cbf6427b2c00ce26e3ab3ea9b20a96a48
- TLSH T13761DDF7BA4252C6BC3199ABAA2F509D108417022366D0FCF6D7DD01DF88F5984783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.