General
- Target extension-fix-1RV9N5.hta
- Size 3KB
- Sample260803-lbd6eatapb
- SHA256 ddead2b98c2125c530c0202f61c61385cf10b15a300038c552f4c224778dea5c
- MD5 f5dbdad9785d78a813456f65ac3a7874
- SHA1 8ac054b31328c339d1ec4163d130a1db4c39cccf
- SHA512 3a72da059847830227722bd57c67c751598cf7ae785b7b79fdc2e5814222c3c6124b53354f7f7014f65975a233b48ada6e34ea42980a2afd629fdf3f78e2b163
- TLSH T1617176F3751A52C6BC72999B4A6F508E44A417426326D4FCE2A7DC01AF8CF5D81B8788
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-1RV9N5.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-1RV9N5.hta
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-1RV9N5.hta
- Size 3KB
- SHA256 ddead2b98c2125c530c0202f61c61385cf10b15a300038c552f4c224778dea5c
- MD5 f5dbdad9785d78a813456f65ac3a7874
- SHA1 8ac054b31328c339d1ec4163d130a1db4c39cccf
- SHA512 3a72da059847830227722bd57c67c751598cf7ae785b7b79fdc2e5814222c3c6124b53354f7f7014f65975a233b48ada6e34ea42980a2afd629fdf3f78e2b163
- TLSH T1617176F3751A52C6BC72999B4A6F508E44A417426326D4FCE2A7DC01AF8CF5D81B8788
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.