General
- Target extension-fix-92LVI5.hta
- Size 2KB
- Sample260803-ltakyawwcv
- SHA256 209284f9b04048608b0deafd303a8cd117fd0b177e80a41f08f565dafdbf853d
- MD5 1db1dfb742c963507a932226ca890039
- SHA1 3b70ce53a2b7513c5d4c84c36d67803557f8ce38
- SHA512 89969c3e6537acbb62e682ca25718cde87a60e5cc35e8e1aad119b6b524cca2eea12c0ffc05ab0212d73aa6ca8a9e324299b5ba8755a8f4a89cc1ca96fcddef7
- TLSH T114519CF7BE8293C6BC3249AB2A2F108854941A032765E5F8F7A7DC00EF8DE5944747D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-92LVI5.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-92LVI5.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-92LVI5.hta
- Size 2KB
- SHA256 209284f9b04048608b0deafd303a8cd117fd0b177e80a41f08f565dafdbf853d
- MD5 1db1dfb742c963507a932226ca890039
- SHA1 3b70ce53a2b7513c5d4c84c36d67803557f8ce38
- SHA512 89969c3e6537acbb62e682ca25718cde87a60e5cc35e8e1aad119b6b524cca2eea12c0ffc05ab0212d73aa6ca8a9e324299b5ba8755a8f4a89cc1ca96fcddef7
- TLSH T114519CF7BE8293C6BC3249AB2A2F108854941A032765E5F8F7A7DC00EF8DE5944747D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.