User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:1960557f33fd996608da47724ed1092eec3cd45a9b54b092dbc675ce399fd86a
General
- Target 1960557f33fd996608da47724ed1092eec3cd45a9b54b092dbc675ce399fd86a.zip
- Size 820B
- Sample260817-fd6qjsem2s
- SHA256 b8d25b53241ccbbf81f81042ca3028895b7d86ea1b5a0bcf1b0fa35aa55af025
- MD5 94202a8a56c885babcabd78e2ddebeac
- SHA1 a47905e97791f5c0eb4d5c1a0b06762cc8d70798
- SHA512 cdb6edae06d571db0342d05609975ffd467ca3dfc76e235039078d206e27edbcce14080ef41a93b73f71692ad2afc5e994b0f03f7cdf91591f815952d2a10a0f
- TLSH T1FE01C58C8AEA2B0EFB3FC83209F1A08E04E835EC0D02A0D8880711120594E8C9393FCF
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N8RH34.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-N8RH34.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-N8RH34.lnk
- Size 1KB
- SHA256 81f852ce855825c5be82345ca6bb9fbe45e8e8890329b7f39639d80236c8f626
- MD5 cb6988fd92facd2789ad49d9d24f1d43
- SHA1 9e3f3b2504d462c1dcfacbed52c307a26d30558b
- SHA512 b7591f20ffe5a1607400351a05e405f3cbde3b9826e4916e0897f9333e3621708a1f807e572a7b3de28038420047bf66330718cf8fc11d6717daf641071f4b01
- TLSH T16A31CB003FED0624F3F38F7394BB572085BBB96A8D20DA2E0040450C1032A15E13BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.