General
- Target extension-fix-IJQZNE.hta
- Size 2KB
- Sample260803-lttntatgla
- SHA256 a787c5da7079e464310c04daea1553c8d1f51ff86ed6acbe03f06fbb59afa984
- MD5 1bc4a49ab220eb6ec4671043a2cd6cfa
- SHA1 32c0fdcf285c42d474b9988a3eb16af2a79cf29d
- SHA512 91e405bd4cf61c75e1c830d1e5877b8b316a866a3552cfe7d30559d948c0cc2337e8efcca9a26bd9d1ae95bdbecc7246a2fba9be795298d2aab95b16e371f12d
- TLSH T11651FCF7BA4A52D6BC329E8B2E6F008D109457062376E5B8E7D6EC00DF88E5D41783D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-IJQZNE.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-IJQZNE.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-IJQZNE.hta
- Size 2KB
- SHA256 a787c5da7079e464310c04daea1553c8d1f51ff86ed6acbe03f06fbb59afa984
- MD5 1bc4a49ab220eb6ec4671043a2cd6cfa
- SHA1 32c0fdcf285c42d474b9988a3eb16af2a79cf29d
- SHA512 91e405bd4cf61c75e1c830d1e5877b8b316a866a3552cfe7d30559d948c0cc2337e8efcca9a26bd9d1ae95bdbecc7246a2fba9be795298d2aab95b16e371f12d
- TLSH T11651FCF7BA4A52D6BC329E8B2E6F008D109457062376E5B8E7D6EC00DF88E5D41783D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.