General
- Target extension-fix-ZCGW4F.zip
- Size 1KB
- Sample260803-p3febsyckb
- SHA256 93980f9ddb97dc046436dc199a5fc538f6acae7672f6e57218f5506e66c6a1aa
- MD5 5574e811812321cb03b24b58134ba24a
- SHA1 158a5a752b40bb826821a077b4dbc290756b2585
- SHA512 7130229b53b4b6d1b5ca628540f93db6cde0f6246e66cece890c73e9f6a28914c19d9d941b00df57392c157e3a35fd5ce6d769f66835fc4bfdb6194dcc898157
- TLSH T18F21C584A31FB181C2B2EE3A5C1E8723CEAB1112288AB20588B0E086510279B9F4C414
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
extension-fix-ZCGW4F.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
extension-fix-ZCGW4F.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target extension-fix-ZCGW4F.hta
- Size 3KB
- SHA256 e544b27145cfc9e0cfbc35308d9bc14ab69cec7309e4869a213a39993120ca9c
- MD5 486b810b3d5a9c50195904f4ee708e82
- SHA1 91325c04f7a8445ef655e33d0985c5ffbcee4980
- SHA512 a7dd82675e0360a74cfa1f85e5271d6da9f512fb1f39a6783c3abf2783be9ad3c2faae572ddc69c21a3a92f1f971404513a07e5a60931d283d8ef57dcad94bdf
- TLSH T1F861EDF7BA4642CABC32899B5A6F109D14941B022366D4F8F297DC01EF8DE4D45B87D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.