User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:17e6a164c8bb0b825cf44b44431944e27438a3b6b00727ec4d12d5b077129c5f
General
- Target 17e6a164c8bb0b825cf44b44431944e27438a3b6b00727ec4d12d5b077129c5f.zip
- Size 1KB
- Sample260817-fdwwcatwes
- SHA256 6ea1a6ad5a07c62a7619a9f23252d8c07643915c2c0bb51f6dab133bfe61924d
- MD5 840c2c5e796f7c442a1098e703795287
- SHA1 7050fafb1c451c00612f1f56a9f63dfc03b6ecd3
- SHA512 8da6d99bf3d47f3738f11fbf05651ce50f9cb6d6646270ac6a453fb718673289e50aa96a4c5fd7ebc43a2da02c481524ce560abfa1d7717a84523d3667ee3dbf
- TLSH T13611B5651FDE59C5CD1A38B0BBEB734B34E1D4C0482321B3900B0A30541E9982D5B4A1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D6R95S.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-D6R95S.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-D6R95S.lnk
- Size 2KB
- SHA256 3c1146cace7c01c01eca6573ae7391f86a7bbd701f030b46f2746f6f5ba42ee0
- MD5 78b16d9eb22a7659d18e92db56b286e2
- SHA1 161aca49a407726e292b430354c0fa2c325a2190
- SHA512 cad5288b2572e13641b672cd6b89430eb58521dcc19ea6f453658e7057499dc99109ec5bb3f0aa04e22b6624ab6c685c515a68f26ce18c91abf2a6f078f3f1b3
- TLSH T13A4145403AE905D8F2BB8E36D9FF27104DBBB8564EB0C59D0840820E0061F42ED37B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.