User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:0a3edbbdffbd3df74232c2f4c3307c6aedab6a99b8981845800800b26712fac0
General
- Target 0a3edbbdffbd3df74232c2f4c3307c6aedab6a99b8981845800800b26712fac0.zip
- Size 817B
- Sample260816-vld3tsszes
- SHA256 5ca11fd86ba34fd73f4a3b88a4508356c5df268ba9e37c2b8c9997b30c9daaca
- MD5 86e71ce4e0f693b04b7d22753091f0c9
- SHA1 06ab2de7b95b2e331a773988a8b768b2a0cdf741
- SHA512 4c53f6171e097ca80bb92d11272025b629b2e636f1b9749d31433b0b7153f84ea15a4f0d11ee25477b6a692cfa006787ace2107f1966e1187a2e44d43ab8efc4
- TLSH T1EE01C53812AF64A1C6876339748720C12D7BE6A77FCB921D39236C7C1A191D006D2B04
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8HE7QA.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-8HE7QA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8HE7QA.lnk
- Size 1KB
- SHA256 4126e42c95d8ee2fd4956f91025498d12ec941db77c4f0941d84213c51da531f
- MD5 7f0ecfb07597d7535f96fb4a6d26c124
- SHA1 786a9fe3f9578c487532692e8ce5e8ecba897c07
- SHA512 dc6bcdc6ba74d5d2f98218819216dcd817bfc607f89315942836caeb4e16823c13e71bd95e3c96231205a0093fb40d52e17510099c2c960e639c5d3118d0ce53
- TLSH T1C83197503FED0624F3B79F7294BB572085BFB9568E20CB2E0041450C5422A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.