User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:14d16a0eb93fcbaad3a6eb63efa61019156c0842ef4a771b7c47b78f413e5dfb
General
- Target 14d16a0eb93fcbaad3a6eb63efa61019156c0842ef4a771b7c47b78f413e5dfb.zip
- Size 1KB
- Sample260817-d6h4vaej4t
- SHA256 5f89ee7dbf74ad4b0de00aae782d1e603af5aff47850593aedc7c3df1b912be2
- MD5 9b5578212334d1be15bc39d661240757
- SHA1 90a0198eb21f236eacfca644a95896c6392060a6
- SHA512 63055d748bbf96591d4d07e81e778572ade2ccb44da03c487ed50a4c2789364bf04e4f0c72b31f51cbe3c1ec74e91effb17882c9edd8509146b3ccd7bfd3b9af
- TLSH T1B621934AA2F0B53EDEB05E79164E8186EE8410FD247E889780F8C119FC662F2978519A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4XJKGZ.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-4XJKGZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4XJKGZ.lnk
- Size 2KB
- SHA256 98f2db386bb51a907ad9b9a2783dfcd5d6866f3ca73b88ce4f63954b3917d8f7
- MD5 3aae22eab17b76de178d43e1843f647c
- SHA1 3423aab3ac1f6fbf1a37416607cd530944fbaac5
- SHA512 b19c5abda9582d237042e93489389fb96b1e258d49d7d1e53c8b3480f52c98ed10b64f5d8a127f5f80cedda797662caee206ec22e5be1211fc23d20017293616
- TLSH T16E4122803AEA41A8F3FB8E32ECBE2BA1457FB8515DB0C58D0940824C0462705E937B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.