General
- Target extension-fix-VQHOSZ.hta
- Size 3KB
- Sample260803-llakzateja
- SHA256 805dab476f7cc451c4b54df34393dd24d7f1efbf63e2a279d1603eaa49914cc8
- MD5 43cfb37bce85aa9795206a3bd5817fef
- SHA1 bb0cdc20e50025f1535018545d174df2329f8729
- SHA512 719700f43926e7bb345fc804c60503233b93a8deb6df16a165a838b3993cdaf639086975916ad4cec0750b1a786499fe4b21b4734cf5ea7cb3e41f899b960308
- TLSH T104519DEBB54362C67C32599F1A2F508D10E51B43237DD1B8FA96DC45AFA9E0980343D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-VQHOSZ.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-VQHOSZ.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-VQHOSZ.hta
- Size 3KB
- SHA256 805dab476f7cc451c4b54df34393dd24d7f1efbf63e2a279d1603eaa49914cc8
- MD5 43cfb37bce85aa9795206a3bd5817fef
- SHA1 bb0cdc20e50025f1535018545d174df2329f8729
- SHA512 719700f43926e7bb345fc804c60503233b93a8deb6df16a165a838b3993cdaf639086975916ad4cec0750b1a786499fe4b21b4734cf5ea7cb3e41f899b960308
- TLSH T104519DEBB54362C67C32599F1A2F508D10E51B43237DD1B8FA96DC45AFA9E0980343D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.