User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:156ee53ffe2b527ac1d4f712918efad6cb24bac33053b979e80254aa91ec85fe
General
- Target 156ee53ffe2b527ac1d4f712918efad6cb24bac33053b979e80254aa91ec85fe.zip
- Size 1KB
- Sample260817-e5h8wstarg
- SHA256 1d1632e79b31caf598a45c093df986db0c214b7acfe228c12eac694a6970ef8f
- MD5 8423eb5bf0aa6c3d5ac8b8578bf103c9
- SHA1 7a4a3c685914c99dad824d44886c59deef669fa4
- SHA512 117f8b5a5a00898851c1ae383fa3c716937114ffc77a1d6fb99748a0a7449d45724b198fc55c9935af99c4e80494f80e9cbb3d7dc4495b8df101179915f3d9a6
- TLSH T10711B5867DBECC44F621DCB4410A2BDDFE560701C9A0E6D2E3189BE06840E8E58959E3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BLEY1F.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-BLEY1F.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BLEY1F.lnk
- Size 2KB
- SHA256 ce9fa507c19479099b9c5deb9f5f5c26c7ab5a485e6ccd3be6189e94eba7eb2e
- MD5 76615329de4b000c64ce04c0ac778caa
- SHA1 d25f66fbc0a68d338adaeefb8996d84973a2c71b
- SHA512 8b69ac88b9a31da0227b3d4823dd31faa6f6b62333add8332b63853b885023e1e4c49fbbe1d960213f9a6a548afea452fad41b6c37fe3c57180895357bd6f165
- TLSH T1C84197902AE800C8F2FF8E72EDBE3715497BB9968D70C98E0C80814D0422B16D937B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.