User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:07bc0c598a5fe97906440611c3eb4bcef751c1650b1e8679834c91f97fb2a27d
General
- Target 07bc0c598a5fe97906440611c3eb4bcef751c1650b1e8679834c91f97fb2a27d.zip
- Size 1KB
- Sample260816-thv2hadr9v
- SHA256 964e7afb1f71f951526d1ea533f65a1c03203f3dbe10562e725ce0ed8f398c6f
- MD5 5efa6acd334c372e88d05c4b643a39c8
- SHA1 b708bdaf13be0821629bd118ccae9b9394d8a088
- SHA512 ef7844d307e9fe1d92cae6b64d05d207dcababa214ea32690e17797c932026609f18a2446e9ae19202c685b4e740dc53ffa5f90020ab0c6aede3ba3833bcb0d6
- TLSH T1E521D744F925384BEC9691BC7F99BA864DAC017597039E66453872DA00EA803066AE26
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OCD5YV.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-OCD5YV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OCD5YV.lnk
- Size 2KB
- SHA256 c9fd5abaa603a19ca2138c2b160d75080931c333784e2708f4b1df214a4deddb
- MD5 7af63c9d3d1da7839465decbdc84633d
- SHA1 d5de287b443daf4bb7a785ef99cc1a3e3cd81a4d
- SHA512 48ce531f36fa9eef005dbd3467ba42c294d3e1c2641731d6236a2058a16fc06c444fb79e6fdaf5ecc5dad59f283971fad11577bf79892207f5044bd0562fc7c4
- TLSH T1104149802AE900A8F2BB8F36DDFE7795497BBA955DA0C65D0940810D1836B01E9B6F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.