User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:198cedeb957bc0d11f7e0904c5d183d02e7550859fbf5ab6f7a000dcdd0f53c5

General

  • Target
    198cedeb957bc0d11f7e0904c5d183d02e7550859fbf5ab6f7a000dcdd0f53c5.zip
  • Size 1KB
  • Sample260817-fd8j5sem2t
  • SHA256 aac16ea2d9f0c2335e120c806524c8152041aa0fbab9ce5fa4d50cf4d30144b8
  • MD5 SHA1 SHA512 TLSH
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB

Targets

    • Target
      DOC-TNIIQR.lnk
    • Size 2KB
    • SHA256 aa2847be88c39d5832c64882122cf2f7b5bdfdc958f4fe7795f1c2995baa9ef8
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks