User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:086aa8522d484b9a87e9bac87143107b3d1084efaad8dd6a552821d3ac62f0b8
General
- Target 086aa8522d484b9a87e9bac87143107b3d1084efaad8dd6a552821d3ac62f0b8.zip
- Size 1KB
- Sample260816-thygma1gjc
- SHA256 8fb622ee398ead237c439a9e7d7c7346688b01f2b6e29a531d75125fe2ffb3e8
- MD5 999a3e2565cc3ed9c304ce0687284c60
- SHA1 5526cdd195d98a54bb9e730531fc942d4187de05
- SHA512 d8d5d4c468ba20cab38b76a9cf40eaf31db900956d5ad78ce844e567af42bc33e8b106b948024065949658e46855fbd8133fe312a58fbe9072550c8537894a4c
- TLSH T14611B610306C1B90E8A384FE1C0B9553EB9613C24902911A8835B9D40C9DD2AD9E4EDF
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UAR3GC.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-UAR3GC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-UAR3GC.lnk
- Size 2KB
- SHA256 5d4e27f563b3c59deba791a9629ca4849ea8af1ac332eacc4045ac02ba8ec5ee
- MD5 3f09448852c8756ed9e9368131cf1368
- SHA1 33ef0e061feaa88b9b8bc023be3c683686648f55
- SHA512 4f098506483b84aa0a06a739d102955b28341fab4a638d461e59612a96b02d9a621117130a3ad3f1f08cc6ba5a4d1843ea3a3eb84f4dbc5153646ae464047887
- TLSH T1424197502AE905E4F3BB9F33C8FE17A189BBBC616DB1C60D0850824C6462701E4B3F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.