User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:01ac59515012a2bc440fb6ddb8c825195c568a4cb7c7dc2595b3ba2d1463f63d
General
- Target 01ac59515012a2bc440fb6ddb8c825195c568a4cb7c7dc2595b3ba2d1463f63d.zip
- Size 1KB
- Sample260816-m622dswekf
- SHA256 546798a66116c9615e4ad14475f5bc76ea7ebf197f2cb2db4dc5a4e789e2c7a2
- MD5 80964563b9529c975bf7b73610333102
- SHA1 2a7c5c40f7bdae9a70ce7202c1e7d751bfddca5c
- SHA512 a8adc024ee1b32319b4fb9f911cfa0a72d6cd4e4ae8383803f7b1b1ef5b20e8e256c72767959e1efeb869a1c34931eff9f62fced68655648320ebd8673724dc9
- TLSH T1A821A302BF370F80E60E097009B6362E808A52EF3CF5E4C41826B1169621176BF3BDA2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Q13AOV.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Q13AOV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Q13AOV.lnk
- Size 2KB
- SHA256 6da45c46ebc81aaeb9665f87d47869d2717db39b643b4fe493cacc452d959af5
- MD5 76addd86e649f8c657308a29f95f2896
- SHA1 088c5b07f7d16260847a18cd35c445287bf69891
- SHA512 eaab6a9205d03b0076c3a69765957d343ba248e0e6e2afc2cc80d706ad7ff7d1da80b26d9c60ceb02f2f7eb13e1f8c46887be1ff74289596cb87b61ffeabc911
- TLSH T1865167402AD941E8F3BF4E36DDFE2B90497BB8625DA0C65D0C00814D1922B05EDB7B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.