General
- Target extension-fix-A29QCU.hta
- Size 3KB
- Sample260803-lwfvqsff63
- SHA256 7d5eacecaf355fb774cd13da22342044d9236ed787eb753691f406b88e5be05b
- MD5 75b2e9b146751050e235baefb2883a01
- SHA1 7c47a66e4d61bc89858b2714803619fb068db522
- SHA512 1dfefcbd1bc56c52def52bb825c3a48408994d96c2c70e9a5c012b71cb742e2708375352dd3833276b649d71b19ec41c0247bf7b21149fdc700194531cd214fd
- TLSH T1A851EFF7798682C6BC32899B2A6F51CE149417021366E9F8E3D6DC01EF8DF4941787D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-A29QCU.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-A29QCU.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-A29QCU.hta
- Size 3KB
- SHA256 7d5eacecaf355fb774cd13da22342044d9236ed787eb753691f406b88e5be05b
- MD5 75b2e9b146751050e235baefb2883a01
- SHA1 7c47a66e4d61bc89858b2714803619fb068db522
- SHA512 1dfefcbd1bc56c52def52bb825c3a48408994d96c2c70e9a5c012b71cb742e2708375352dd3833276b649d71b19ec41c0247bf7b21149fdc700194531cd214fd
- TLSH T1A851EFF7798682C6BC32899B2A6F51CE149417021366E9F8E3D6DC01EF8DF4941787D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.