General
- Target extension-fix-FO3VPE.hta
- Size 3KB
- Sample260803-larecavyfy
- SHA256 f4390777f99a8ef937c4b56e766fa10c4368ee631ade7cd0e195f624bbd7d3fe
- MD5 6638004b8e685e2ae2bc05b990c03c5e
- SHA1 73908b3b55882a8f7a8bf715b24ae09db5bf5c2b
- SHA512 fb0c9d268399d588d8bab56cb3be5a75b5ed42d98086cab52ced44120850dc9b948174c3f3265a4d6a257009823f01410211b7e9e519a1c3162262552a16eb0c
- TLSH T13461FEE7BA0252C6BC32999B1A6F509D18D41B421362D4B8F697DC00EF8CF8E81797C8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-FO3VPE.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-FO3VPE.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-FO3VPE.hta
- Size 3KB
- SHA256 f4390777f99a8ef937c4b56e766fa10c4368ee631ade7cd0e195f624bbd7d3fe
- MD5 6638004b8e685e2ae2bc05b990c03c5e
- SHA1 73908b3b55882a8f7a8bf715b24ae09db5bf5c2b
- SHA512 fb0c9d268399d588d8bab56cb3be5a75b5ed42d98086cab52ced44120850dc9b948174c3f3265a4d6a257009823f01410211b7e9e519a1c3162262552a16eb0c
- TLSH T13461FEE7BA0252C6BC32999B1A6F509D18D41B421362D4B8F697DC00EF8CF8E81797C8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.