General
- Target extension-fix-EUFR1N.hta
- Size 2KB
- Sample260803-lmx3natene
- SHA256 41ba3099bce86f8ec53a7fe5cd1b7c397bf390e26e308a8c3c0f3eb3c90d8f96
- MD5 781d913812a979f2814ee1c5269f1d95
- SHA1 757475636901b1d2f15ac8cee0220cff57f22f78
- SHA512 c4436c90419040cc13d6ac2b2f5897e060b7f9d8eb04f82a07ef13922cb0a7b7d8ef7dc9e839709428f2e2afa19eacef88c827ace5576e0d5a4b7035fb7d6c0b
- TLSH T1595102F7B88A52D5BD329ADB1A6F40CD549517021366D4B8F7A6DC00EF9CF4940783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-EUFR1N.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-EUFR1N.hta
- Size 2KB
- SHA256 41ba3099bce86f8ec53a7fe5cd1b7c397bf390e26e308a8c3c0f3eb3c90d8f96
- MD5 781d913812a979f2814ee1c5269f1d95
- SHA1 757475636901b1d2f15ac8cee0220cff57f22f78
- SHA512 c4436c90419040cc13d6ac2b2f5897e060b7f9d8eb04f82a07ef13922cb0a7b7d8ef7dc9e839709428f2e2afa19eacef88c827ace5576e0d5a4b7035fb7d6c0b
- TLSH T1595102F7B88A52D5BD329ADB1A6F40CD549517021366D4B8F7A6DC00EF9CF4940783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.