General
- Target extension-fix-R13LLB.hta
- Size 3KB
- Sample260803-lharkafd67
- SHA256 b97e110c4bf78d20fd41735582c1b21d99d44ca6d2e4a6f2d1410b39b8a5ee33
- MD5 6cf4ddb7f08fa5b9b109c17cc0042f4c
- SHA1 a401230a42ffe8c217f84b5c8175e7424ea49335
- SHA512 a693bdf6b37e3ff2a55d129bb8fe24595e14ca2ddbdcb4155f9abd689ed0bbc4a6ee1380cc00065f57304233fd031ad1211b77a099544be4fb91b9774fb6af08
- TLSH T1306123F7B90656D6BC3299AF2A2F508E01942B021326D4F8F786EC40EF88F4945787D9
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-R13LLB.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-R13LLB.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-R13LLB.hta
- Size 3KB
- SHA256 b97e110c4bf78d20fd41735582c1b21d99d44ca6d2e4a6f2d1410b39b8a5ee33
- MD5 6cf4ddb7f08fa5b9b109c17cc0042f4c
- SHA1 a401230a42ffe8c217f84b5c8175e7424ea49335
- SHA512 a693bdf6b37e3ff2a55d129bb8fe24595e14ca2ddbdcb4155f9abd689ed0bbc4a6ee1380cc00065f57304233fd031ad1211b77a099544be4fb91b9774fb6af08
- TLSH T1306123F7B90656D6BC3299AF2A2F508E01942B021326D4F8F786EC40EF88F4945787D9
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.