General
- Target extension-fix-L9S3F2.hta
- Size 2KB
- Sample260803-llcqbstejf
- SHA256 e597ebe2f6b5ce3baf91f5793b63bf531d7c02cd4a952b29107ec09963564e11
- MD5 e4e9f8d1863333dfc037a22a2077c6d7
- SHA1 275b019d44865c1e41ba6206eb8c0be1688832d5
- SHA512 93e9c240aae46e6a94e59ce58bcf43872e98a5d290e26abe980482c6a02ec6b7c6cc105abd418acd57ac650695c7056972f6f186138364afbc1174bed93abe15
- TLSH T14C5178F7AA8653C5BC32599FAA3F508914D41A0723A5D4F8F686DC00FF88E5A50743E8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-L9S3F2.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-L9S3F2.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-L9S3F2.hta
- Size 2KB
- SHA256 e597ebe2f6b5ce3baf91f5793b63bf531d7c02cd4a952b29107ec09963564e11
- MD5 e4e9f8d1863333dfc037a22a2077c6d7
- SHA1 275b019d44865c1e41ba6206eb8c0be1688832d5
- SHA512 93e9c240aae46e6a94e59ce58bcf43872e98a5d290e26abe980482c6a02ec6b7c6cc105abd418acd57ac650695c7056972f6f186138364afbc1174bed93abe15
- TLSH T14C5178F7AA8653C5BC32599FAA3F508914D41A0723A5D4F8F686DC00FF88E5A50743E8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.