User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:17e6a164c8bb0b825cf44b44431944e27438a3b6b00727ec4d12d5b077129c5f

General

  • Target
    17e6a164c8bb0b825cf44b44431944e27438a3b6b00727ec4d12d5b077129c5f.zip
  • Size 1KB
  • Sample260817-fdwwcatwes
  • SHA256 6ea1a6ad5a07c62a7619a9f23252d8c07643915c2c0bb51f6dab133bfe61924d
  • MD5 SHA1 SHA512 TLSH
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://geo-pdffiller.lat/h/estagio1.php?r=331061

Targets

    • Target
      DOC-D6R95S.lnk
    • Size 2KB
    • SHA256 3c1146cace7c01c01eca6573ae7391f86a7bbd701f030b46f2746f6f5ba42ee0
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks