User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:15c0566dbcd070ba31043f677e093e9d2e86964e435910dece717bf371d3511b
General
- Target 15c0566dbcd070ba31043f677e093e9d2e86964e435910dece717bf371d3511b.zip
- Size 1KB
- Sample260817-e5q9hatbjd
- SHA256 47ed51c9c077feade112c8a6bffee13d5d77eebe275da66a5c58deef2a3fb17a
- MD5 8efd97d1a4ed3417aa6818c5b6633a96
- SHA1 71a15531425736058dcdc2a51c97ee6f5f386088
- SHA512 95cdde63e5a11dccb2fc9b073960da9dda23bb4c7520cd2bdd20209dc2cc8c3c8a77b1638fa0588d51cb9a2ff6106006380cf4aa46ff77badbdbe54914d27adf
- TLSH T1D021C6A34BE7FFE0BA830EFB9240355F84C448B54494810B26920EFD1420EE8392AD16
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HHXNSK.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-HHXNSK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HHXNSK.lnk
- Size 2KB
- SHA256 6a3ca3199cea1fd5e9164128a7804fe6f47269fda17c9feebc92c2620db78f50
- MD5 8bf45943b555016bd68cd9d0be6064b6
- SHA1 c0b2c1a09a043c2645447de0971cae11399a4131
- SHA512 409d8f8706ae1ebd33b77bfac1dda404050c708533a60705ee228a704dff7581b9a2dbf78563a03dd2a9e93e8471d724fe53f4082f65e115d1c1feb26b374de6
- TLSH T1DE41499429EA01D8F3BA9E36FDFE5754887BF8529DB0C59D0880814D1422F01D637B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.