General
- Target extension-fix-631F5L.hta
- Size 3KB
- Sample260803-lybc2aff74
- SHA256 a7f99897900ec79806a46ee315b6a53379dfeeb66b2ca5026cb71582d9bb643b
- MD5 ee6b73b39c743dfc0d74c7c30089ab9b
- SHA1 e43112290e57aeae160a008a3188f78680732c55
- SHA512 a5596fd05411a6cb42c3c0bc2e057ff24f9723f8373cdde5d49bd776c347b50a06776eb583e0a92aec01c097f9e7f561d3ae7b8c5bfe311c8b0cf7e505de2c44
- TLSH T1DC6187F7794692D6BC32998B1A6F50CE549017022366E0F8E7A6EC00DFC8F4944B87D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-631F5L.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-631F5L.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-631F5L.hta
- Size 3KB
- SHA256 a7f99897900ec79806a46ee315b6a53379dfeeb66b2ca5026cb71582d9bb643b
- MD5 ee6b73b39c743dfc0d74c7c30089ab9b
- SHA1 e43112290e57aeae160a008a3188f78680732c55
- SHA512 a5596fd05411a6cb42c3c0bc2e057ff24f9723f8373cdde5d49bd776c347b50a06776eb583e0a92aec01c097f9e7f561d3ae7b8c5bfe311c8b0cf7e505de2c44
- TLSH T1DC6187F7794692D6BC32998B1A6F50CE549017022366E0F8E7A6EC00DFC8F4944B87D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.