General
- Target extension-fix-GTMO9W.hta
- Size 2KB
- Sample260803-ldcelatbma
- SHA256 83975f3313dca7d7f482f3bc189aad77ced9b5463a012f0f21d57ef34e2f66ab
- MD5 0ac0367fe655aad5ab0cbd03eda2f359
- SHA1 af104f7fa6d521010d19a97c7ec8ca2131332247
- SHA512 b5bfdab33cf8d13e661cf0e04ed4d0249f38ca25833c8a5fb5a4aa52f7f0667e3b5c8d478c2b62a1618024ddcd55453f854737229273fe2aeb6c238be301dd61
- TLSH T1F7519BF7B90646C67C324AAB1B7F50CD14D457425366E4B8F686ED00AF8EF4981783E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-GTMO9W.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-GTMO9W.hta
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-GTMO9W.hta
- Size 2KB
- SHA256 83975f3313dca7d7f482f3bc189aad77ced9b5463a012f0f21d57ef34e2f66ab
- MD5 0ac0367fe655aad5ab0cbd03eda2f359
- SHA1 af104f7fa6d521010d19a97c7ec8ca2131332247
- SHA512 b5bfdab33cf8d13e661cf0e04ed4d0249f38ca25833c8a5fb5a4aa52f7f0667e3b5c8d478c2b62a1618024ddcd55453f854737229273fe2aeb6c238be301dd61
- TLSH T1F7519BF7B90646C67C324AAB1B7F50CD14D457425366E4B8F686ED00AF8EF4981783E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.