User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:2dc0f5d382a1eea6e62d6317bc8c8ed8dc55939fba2eccadd095885b69d8db30
General
- Target 2dc0f5d382a1eea6e62d6317bc8c8ed8dc55939fba2eccadd095885b69d8db30.zip
- Size 807B
- Sample260817-hag9wsaa28
- SHA256 941009233a6ff36276759e6d0b90a2d2da5c965c2032e92b9c0889a11b43b7b5
- MD5 5d46cb4f124ba83fc91fbcf82224d0a4
- SHA1 6de2db89cbf3c891ecb62ca6a9093c7f448dd7df
- SHA512 e32be2ab47dc88dd5000c5d748838a12b08bd4d8086d38606118405b16e2c9a3c503d5572c4f2b32ff8900e350a87a51a3f4a8ebc917e8b5eeb2100ddf583024
- TLSH T1790175F778BACB97F005543305A032A53B6ADB600A40E622CB8B3C58B8F70B606D1711
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IE1UR6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-IE1UR6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IE1UR6.lnk
- Size 1KB
- SHA256 39af01537d10ab9e0bd2c874341ea1e012bba5ef1c92f0ccf9f3fe1d7275003e
- MD5 0201d68200d3d01692be9d148fe58e36
- SHA1 9562ff223df1341f4dd1490ac406a0085316cf53
- SHA512 1ee9e7c98007b6e22062746a2a783e3b7ea3824e0fa3724ef40a5c862c4fadd6a6737eca6b91c5347c54c778b2956ee53d38ca2e758747497e2a1ce65f289fb6
- TLSH T1BA3197002FFD0624F3B38E7684BB6B2089BBB9968E20CA2D0141450C1432A15E17BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.