General
- Target extension-fix-W67ACI.hta
- Size 3KB
- Sample260803-ldx2asfq2s
- SHA256 3d5485092dd6a79617b502f86aaddde6f43997dff8fcc57a93f0004fcaf8b596
- MD5 3fae2d0b4f50b808ce493ff54aad6472
- SHA1 334037f5f3360f3d2c2786867a62f9a4c2f399e7
- SHA512 c896a35e35e1d82d82153cd0dcbad2372a180864976c15d9420f16d0813a74c816b7ffe9c198d82686caa2efef7b360dd455e5d5d88f275843f0709c1c515b53
- TLSH T14461ECF7B54A65D1B93299EB1A6F50CD909007061726E0F8F7A6DC009F88E9C4178BD8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-W67ACI.hta
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-W67ACI.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-W67ACI.hta
- Size 3KB
- SHA256 3d5485092dd6a79617b502f86aaddde6f43997dff8fcc57a93f0004fcaf8b596
- MD5 3fae2d0b4f50b808ce493ff54aad6472
- SHA1 334037f5f3360f3d2c2786867a62f9a4c2f399e7
- SHA512 c896a35e35e1d82d82153cd0dcbad2372a180864976c15d9420f16d0813a74c816b7ffe9c198d82686caa2efef7b360dd455e5d5d88f275843f0709c1c515b53
- TLSH T14461ECF7B54A65D1B93299EB1A6F50CD909007061726E0F8F7A6DC009F88E9C4178BD8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.