User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:122411319545ce661bb120d15addc0e8f207e3d6583b12d5f2fb3e39db2de6a4
General
- Target 122411319545ce661bb120d15addc0e8f207e3d6583b12d5f2fb3e39db2de6a4.zip
- Size 1KB
- Sample260817-d5ttysszcy
- SHA256 b501673d752082b6467c26ab7b63af49fc0f27139e69223d62dbce4aeede7cbf
- MD5 f003206cd7f4a91cfe16879c2e4d6a3e
- SHA1 791f44d24fe2698c67603e57ed7656464fe895ac
- SHA512 38a1d8cfcfd63cf6005ae3734bb81975f80c9dfccf8dadd2b2764c8e7b9177745891a18cb677072b6787df1c5c8a86d47c6acae1c2b63f622ecf0a7fb9016267
- TLSH T14E11D86039C80CD1E843C5F94002E88277A9430A0F2AB5CB00FC0B571EBB8519958592
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-306RAK.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-306RAK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-adobe.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-306RAK.lnk
- Size 2KB
- SHA256 1d93c78d9369c8821548839a07d4eeb103cd95fbf0ba2d0b5cd70e4e89c87ff5
- MD5 c867bc4d7df0de7298464698d733a497
- SHA1 06ef99f99b2aeab1b82b973bde0022b5d9ae84da
- SHA512 18eb92f9e35a1768aa5cde1df0d8936963e51841cdf43f40566ce0245b52fafa3a4a916d934b27522b475d77715bef394b16718907b964fcba344c87cdbdaf87
- TLSH T1FE416B503AE905E4F2BB9E76D8FF2714497BB8965E61C9CD0900810D1832702E977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.