General
- Target extension-fix-02KC6W.hta
- Size 3KB
- Sample260803-lrfdeagk9z
- SHA256 af2af06d022efe95f5a09e229bffab77637f9d89332d1d9926aeb93977587935
- MD5 64a9e7ccf9b44b3d31db4391d4ef8a45
- SHA1 a0fb6664cd81bf0ca00a2d5f8d349481490df10a
- SHA512 c23f22abb3dfbd225122943ca24845f5106b97e8c5edcdf8bceb352c1057a1cc1d8346ef687b59c75af40d6861d33169746f74a45530faf91909143fe88563c0
- TLSH T1A061F0F7B94A92CABC3299AB1A6F108D549017022366E0FCF6D6DC00AF8CF5D45787D8
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-02KC6W.hta
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-02KC6W.hta
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-02KC6W.hta
- Size 3KB
- SHA256 af2af06d022efe95f5a09e229bffab77637f9d89332d1d9926aeb93977587935
- MD5 64a9e7ccf9b44b3d31db4391d4ef8a45
- SHA1 a0fb6664cd81bf0ca00a2d5f8d349481490df10a
- SHA512 c23f22abb3dfbd225122943ca24845f5106b97e8c5edcdf8bceb352c1057a1cc1d8346ef687b59c75af40d6861d33169746f74a45530faf91909143fe88563c0
- TLSH T1A061F0F7B94A92CABC3299AB1A6F108D549017022366E0FCF6D6DC00AF8CF5D45787D8
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.