General
- Target extension-fix-ON51SH.hta
- Size 2KB
- Sample260803-leax6atbqa
- SHA256 371292cbca7a5f5815c02dbf8aaafa1992e17e79cd926f4a2131eb771c5b0b26
- MD5 3207eec2b187fedec2632cbca8d9a54c
- SHA1 11505f66c6dd83ec8d75e2c39ab9be0f126a4a9f
- SHA512 58ac739606fed0c18186aa6efadb629138db9551bbaec60280ebd75a328bc25b1424a620123020cee5542a2cdb651572fb34342baf3e585d675a69b9127e9339
- TLSH T1DF5111F7BA4942C5BC324ADB6A2F10DE149406422366D4FCF2D7DC00EF89E5949B87E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-ON51SH.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-ON51SH.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-ON51SH.hta
- Size 2KB
- SHA256 371292cbca7a5f5815c02dbf8aaafa1992e17e79cd926f4a2131eb771c5b0b26
- MD5 3207eec2b187fedec2632cbca8d9a54c
- SHA1 11505f66c6dd83ec8d75e2c39ab9be0f126a4a9f
- SHA512 58ac739606fed0c18186aa6efadb629138db9551bbaec60280ebd75a328bc25b1424a620123020cee5542a2cdb651572fb34342baf3e585d675a69b9127e9339
- TLSH T1DF5111F7BA4942C5BC324ADB6A2F10DE149406422366D4FCF2D7DC00EF89E5949B87E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.