General
- Target extension-fix-QK1ZDC.hta
- Size 3KB
- Sample260803-lqc7natfkh
- SHA256 5f3a31122bc2b970d60bc54b12e3b27ac5c27981129117fa93f87c3d0750c2b6
- MD5 9eb637d843b75fecf33d7955a79e9d81
- SHA1 62c1416ec216cba5a1f6ba15d5fa83f36a54a27f
- SHA512 56d332476874fb7a8f0abaddebd10d3e07c8393e108d4edcb63c95466161f0b7d9ce4fc8dad48708bc5da2e09ecb48509ca6f48a7bec7121053692082f4862f1
- TLSH T1A65156F77A4652C1BC3289AB6A2F408D68991B422366D0FCF29BDC01EF99F5D44347D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-QK1ZDC.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-QK1ZDC.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-QK1ZDC.hta
- Size 3KB
- SHA256 5f3a31122bc2b970d60bc54b12e3b27ac5c27981129117fa93f87c3d0750c2b6
- MD5 9eb637d843b75fecf33d7955a79e9d81
- SHA1 62c1416ec216cba5a1f6ba15d5fa83f36a54a27f
- SHA512 56d332476874fb7a8f0abaddebd10d3e07c8393e108d4edcb63c95466161f0b7d9ce4fc8dad48708bc5da2e09ecb48509ca6f48a7bec7121053692082f4862f1
- TLSH T1A65156F77A4652C1BC3289AB6A2F408D68991B422366D0FCF29BDC01EF99F5D44347D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.