General
- Target extension-fix-VA0ITW.hta
- Size 2KB
- Sample260803-ld7whafd35
- SHA256 c509996ee8c1a4a16bf24e7cb85f53b298e0f906f4c6133fd66d3c8912b9b1ee
- MD5 99a2ee9f962e103d44fde9435637074c
- SHA1 273f1bd2845c754ba20fd653fe2556b66b4952c6
- SHA512 a6f51599dc15d7dad7f15ee00fb2dbcac028fc639fc83674c6d21e7f4b14dfa2eecb0a76ccb8bb566521ba6d7cf8d4ec28d6527c7b7b2e24c24cae5dc24047c4
- TLSH T12C5189F7BA9663C5BC3249AB6B7F148D14A44A032356E4F8F297DD01EF98E0944743E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-VA0ITW.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-VA0ITW.hta
- Size 2KB
- SHA256 c509996ee8c1a4a16bf24e7cb85f53b298e0f906f4c6133fd66d3c8912b9b1ee
- MD5 99a2ee9f962e103d44fde9435637074c
- SHA1 273f1bd2845c754ba20fd653fe2556b66b4952c6
- SHA512 a6f51599dc15d7dad7f15ee00fb2dbcac028fc639fc83674c6d21e7f4b14dfa2eecb0a76ccb8bb566521ba6d7cf8d4ec28d6527c7b7b2e24c24cae5dc24047c4
- TLSH T12C5189F7BA9663C5BC3249AB6B7F148D14A44A032356E4F8F297DD01EF98E0944743E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.