General
- Target extension-fix-ZHI9OE.hta
- Size 3KB
- Sample260803-lbgxastaqa
- SHA256 2ec2fe5b5a44cd0cb32ace32f5ac346ff909f7c7f6af1b52e275b8e585c7f57d
- MD5 35db28387ea2223f02d2ed61601fc486
- SHA1 d46cc330b5c5b374c6fd58af62b53bf341a93adb
- SHA512 5b1fdc17f7c757cad73e5e75fe25b4a0efeb0b221cc30dc4edc1e290d7455b86cc588fa8694d9a77200cbba8c5cd1018544ccc1bd57667c2d0cc362efdc34a83
- TLSH T186610FF7BA4692C1BD328A9B6A2F508D54940B022326D1F8F797DD01DF8DF4984783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-ZHI9OE.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-ZHI9OE.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-ZHI9OE.hta
- Size 3KB
- SHA256 2ec2fe5b5a44cd0cb32ace32f5ac346ff909f7c7f6af1b52e275b8e585c7f57d
- MD5 35db28387ea2223f02d2ed61601fc486
- SHA1 d46cc330b5c5b374c6fd58af62b53bf341a93adb
- SHA512 5b1fdc17f7c757cad73e5e75fe25b4a0efeb0b221cc30dc4edc1e290d7455b86cc588fa8694d9a77200cbba8c5cd1018544ccc1bd57667c2d0cc362efdc34a83
- TLSH T186610FF7BA4692C1BD328A9B6A2F508D54940B022326D1F8F797DD01DF8DF4984783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.