General
- Target extension-fix-IFMMKB.hta
- Size 2KB
- Sample260803-la58hafc83
- SHA256 6df654687e10293cb6f3eeba5a05a99df8895ae762500c6bfaf831db6d571368
- MD5 cc2df9b8c10eb769c2135246f536b479
- SHA1 223ee7e1e291b560f80139af94310282a4c2331a
- SHA512 5715a786c9b8ba54b9f46b6be65d37250625e6f66445519202d5dbed9ae930dc443a7b6bce44913256cde0b822eff2febf823aacdd82df7785f50f10f1b0176e
- TLSH T1245157F7BA8B52C1BD325A9B1B2F408D54D116031326E1B8F6D6DC00EF88F1984787E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-IFMMKB.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-IFMMKB.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-IFMMKB.hta
- Size 2KB
- SHA256 6df654687e10293cb6f3eeba5a05a99df8895ae762500c6bfaf831db6d571368
- MD5 cc2df9b8c10eb769c2135246f536b479
- SHA1 223ee7e1e291b560f80139af94310282a4c2331a
- SHA512 5715a786c9b8ba54b9f46b6be65d37250625e6f66445519202d5dbed9ae930dc443a7b6bce44913256cde0b822eff2febf823aacdd82df7785f50f10f1b0176e
- TLSH T1245157F7BA8B52C1BD325A9B1B2F408D54D116031326E1B8F6D6DC00EF88F1984787E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.