General
- Target extension-fix-JTEPRK.hta
- Size 3KB
- Sample260803-lnl2sawvbs
- SHA256 8220802a9dce619fe859b46b2299709f1c398315530952f2c3e0942c23988446
- MD5 0edc581ca13edd80360accfa99461a16
- SHA1 27a619fc357fd00130d1b3dabaa8c5b33ee733bf
- SHA512 cd5fea126761c5bbd55acc3ac0bb67ff95a33daf8a80ef8a1bf2e3a58ae134ea993a1074be3279bce4876a2065087bece9b3a4f87c41b42a148f9c1717467b7a
- TLSH T1346188F7B94752D4BC328A9B2B6F508E14C516031326E4F8F296EC40DF99E6D4078BD8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-JTEPRK.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-JTEPRK.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-JTEPRK.hta
- Size 3KB
- SHA256 8220802a9dce619fe859b46b2299709f1c398315530952f2c3e0942c23988446
- MD5 0edc581ca13edd80360accfa99461a16
- SHA1 27a619fc357fd00130d1b3dabaa8c5b33ee733bf
- SHA512 cd5fea126761c5bbd55acc3ac0bb67ff95a33daf8a80ef8a1bf2e3a58ae134ea993a1074be3279bce4876a2065087bece9b3a4f87c41b42a148f9c1717467b7a
- TLSH T1346188F7B94752D4BC328A9B2B6F508E14C516031326E4F8F296EC40DF99E6D4078BD8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.