General
- Target extension-fix-WS99VB.hta
- Size 3KB
- Sample260803-lm3yxateph
- SHA256 22c6af1b836541e0bead8024e485a0f0b69331e96a3ba9c9dd8350a42fe978f6
- MD5 a0454bdb30231b656c1eb7b848641064
- SHA1 146acbdf3a07ecf20567173d656fe690328a28d1
- SHA512 46cfbc86d8407f2796df551f3921fe354570b3d02c5fd595a89b194868bd0d7e2ff907b0c95554d1f02e0fdfe9a8912a32f86cde3b5f0d04a48e5cd36155d3b9
- TLSH T15C5158F7B98653C5BC3159DB2A2F508958941A03236AD4FCE2969C05EF9CF4D84383D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-WS99VB.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-WS99VB.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-WS99VB.hta
- Size 3KB
- SHA256 22c6af1b836541e0bead8024e485a0f0b69331e96a3ba9c9dd8350a42fe978f6
- MD5 a0454bdb30231b656c1eb7b848641064
- SHA1 146acbdf3a07ecf20567173d656fe690328a28d1
- SHA512 46cfbc86d8407f2796df551f3921fe354570b3d02c5fd595a89b194868bd0d7e2ff907b0c95554d1f02e0fdfe9a8912a32f86cde3b5f0d04a48e5cd36155d3b9
- TLSH T15C5158F7B98653C5BC3159DB2A2F508958941A03236AD4FCE2969C05EF9CF4D84383D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.