General
- Target extension-fix-TS79DN.hta
- Size 3KB
- Sample260803-lrpbbawvhx
- SHA256 99d886d69d2252f2fcaa68c6565c11c379a61e4ece784f2b38dcc051931e474d
- MD5 d7fec6eb82799a68c384192d17391ae7
- SHA1 feabf30e89da083f8076c241e488234c8ed941b4
- SHA512 7991b630726095a4d12edfa94139734ae27f19a8cfd9c540a3af3bd65e05027fda0d37a08d53e2393ead09c2dcfabb052a994d19957e6fb87a08c9fb2f37a2c2
- TLSH T1165154F7B94652D8BD3289DB1A2F50CD589407021326E4B8F7D6DC00AF8DE8984747D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-TS79DN.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-TS79DN.hta
- Size 3KB
- SHA256 99d886d69d2252f2fcaa68c6565c11c379a61e4ece784f2b38dcc051931e474d
- MD5 d7fec6eb82799a68c384192d17391ae7
- SHA1 feabf30e89da083f8076c241e488234c8ed941b4
- SHA512 7991b630726095a4d12edfa94139734ae27f19a8cfd9c540a3af3bd65e05027fda0d37a08d53e2393ead09c2dcfabb052a994d19957e6fb87a08c9fb2f37a2c2
- TLSH T1165154F7B94652D8BD3289DB1A2F50CD589407021326E4B8F7D6DC00AF8DE8984747D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.