General
- Target extension-fix-QG9S1B.hta
- Size 3KB
- Sample260803-lblv9atarb
- SHA256 9f321fa842cb04752739270b922f627f976c09abf31d15fcec66812479f30ce3
- MD5 ad9198cc1005dc7bc904ab6cefd1b693
- SHA1 1aaa3ad7c8bcaa9bb68c2567512453fa9c143644
- SHA512 6c04dde9ee3441935e6604e487dd060cdf9ce3b5688b8ba215369de21b4a931f99a4090f7d6bd37db6fc74a7ce9e2354358100111eea88ddcc15b0fe84fcbd3c
- TLSH T19161FFF3794656C6BC32899B1A2F40DD1490161263A6E4F8F7E7EC00EF8CE9941787D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-QG9S1B.hta
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-QG9S1B.hta
- Size 3KB
- SHA256 9f321fa842cb04752739270b922f627f976c09abf31d15fcec66812479f30ce3
- MD5 ad9198cc1005dc7bc904ab6cefd1b693
- SHA1 1aaa3ad7c8bcaa9bb68c2567512453fa9c143644
- SHA512 6c04dde9ee3441935e6604e487dd060cdf9ce3b5688b8ba215369de21b4a931f99a4090f7d6bd37db6fc74a7ce9e2354358100111eea88ddcc15b0fe84fcbd3c
- TLSH T19161FFF3794656C6BC32899B1A2F40DD1490161263A6E4F8F7E7EC00EF8CE9941787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.