General
- Target extension-fix-RA5EDY.hta
- Size 2KB
- Sample260803-labznatamf
- SHA256 c714b272e63306c801282eb12e65109d43f1bdf0911960488ea97a9fd6e7d94a
- MD5 0fd841a1e5c0ee10ef9141b5eb899c24
- SHA1 1b2d416a2cf32f0709ff6703fda3871c21cae4f3
- SHA512 850382bfc7600cf72e2677add7a4c8d88e23754e438fb216d0acf51daca9aac0d10b6a3c4c1d91dc63984eb78703e4a1a83da47003361d585ebf460dd09c1e24
- TLSH T126519CF77A8353C6FC3258DB5A2F5149249527432375D4F8FA46A900AF8CE0A84747D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-RA5EDY.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-RA5EDY.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-RA5EDY.hta
- Size 2KB
- SHA256 c714b272e63306c801282eb12e65109d43f1bdf0911960488ea97a9fd6e7d94a
- MD5 0fd841a1e5c0ee10ef9141b5eb899c24
- SHA1 1b2d416a2cf32f0709ff6703fda3871c21cae4f3
- SHA512 850382bfc7600cf72e2677add7a4c8d88e23754e438fb216d0acf51daca9aac0d10b6a3c4c1d91dc63984eb78703e4a1a83da47003361d585ebf460dd09c1e24
- TLSH T126519CF77A8353C6FC3258DB5A2F5149249527432375D4F8FA46A900AF8CE0A84747D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.