General
- Target extension-fix-EFQXCG.hta
- Size 3KB
- Sample260803-lvxrvsff37
- SHA256 97f7bc24ad5dcd320856f54ab381ece4e79dfe49fdce06506dcbbe9afa7a1652
- MD5 cc845790e3b2b2418049b29e8f0d2a2e
- SHA1 acc07b060531e6c1b45ae458c33cd40f9e0e77d7
- SHA512 b8ee1396a2f8fd423851b2063b4b3df5a53155dcc497b136f05a3ec08755154a4afd6583dd451a0cddde6c6423b87a72b9a55f4e179a86e73a4c903099163ef7
- TLSH T1E561F1F7B95642C6BC32999B5A6F508D50941B022326E4F8F697DC01EF88F5944B83D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-EFQXCG.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-EFQXCG.hta
- Size 3KB
- SHA256 97f7bc24ad5dcd320856f54ab381ece4e79dfe49fdce06506dcbbe9afa7a1652
- MD5 cc845790e3b2b2418049b29e8f0d2a2e
- SHA1 acc07b060531e6c1b45ae458c33cd40f9e0e77d7
- SHA512 b8ee1396a2f8fd423851b2063b4b3df5a53155dcc497b136f05a3ec08755154a4afd6583dd451a0cddde6c6423b87a72b9a55f4e179a86e73a4c903099163ef7
- TLSH T1E561F1F7B95642C6BC32999B5A6F508D50941B022326E4F8F697DC01EF88F5944B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.