User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a10f4f6f7a75e51e99f6efb9de6fabb9d3c53e98de6e879085869bf49526e707
General
- Target a10f4f6f7a75e51e99f6efb9de6fabb9d3c53e98de6e879085869bf49526e707.zip
- Size 817B
- Sample260817-284ekaar91
- SHA256 dc897c0446325ce0d3d15032560c86b4ef619bc2c3aa10e166f944dcc5f51369
- MD5 91884e763ca94bc7fdaae066f7506c33
- SHA1 e07c192349a2c168b5360232d1501e305455511b
- SHA512 2915987484708394ad191b234624e1f054e4bc96d4d177cec09d1c416ce9f8f05fa056604b5616f1c3fa0af319abee52afe6e10b24952489903e743e71c7bd1d
- TLSH T1AA014168B614C246EBA754B70BAF38434535F6692A3B636C7538133040E3BF82A7AD54
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N9ZMMR.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-N9ZMMR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-N9ZMMR.lnk
- Size 1KB
- SHA256 2f3763a42082441abbef2f26e5b7a6969f3c8bb3fa6ebfd9fa3fb977740c098e
- MD5 63ead94245cdb8e7dbea1eef30e107c9
- SHA1 ecc49120df39a012311290a5cf0289e7cca95ed3
- SHA512 b11c17f77475d9cd2ee0a94c16ec8a9e1c4eab7b1ea0e8f8c32205eb69d1b5a10198e9e885433749119f57473e685b3890b44dba8f3aedd78a76bf78c6483234
- TLSH T1EA3197502FED0624F3B7CFB284BB572489BEB9A58E20C62D0041450C1022A15E13AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.