User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:2fae38d60471f197281d18f1c79f96674fcf08b6b17d37a36a4489640de2d70a
General
- Target 2fae38d60471f197281d18f1c79f96674fcf08b6b17d37a36a4489640de2d70a.zip
- Size 812B
- Sample260817-hjmkzavfld
- SHA256 48639ee08d5188f36f3e0679b6c4c74497273ace0b83e2f1f000a563c28028e7
- MD5 8c2003ae8a905eb271d790a67dd47fdb
- SHA1 3ae8071c1343f7a3b14757bcb36bd9887c29f455
- SHA512 7f0499e591cf86775e92f7b91bae92c621866cc001d6686bb6f80a4208aee84b49520a85f6994ef68e9b314077a2e10fecf8963cb9f76cd25b5cd7d14cb6f6d5
- TLSH T11F01416096662A13FBE264BF27EC0BC0512472D080E1E909C904A264AF627D1BB93C27
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-I9ELOM.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-I9ELOM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-I9ELOM.lnk
- Size 1KB
- SHA256 4ab299d5137d0f2a3b988b04f738b707369feef3c78262f49fd300e439d657cf
- MD5 00e5c8249e90dbabed21c40d579f14ee
- SHA1 8ece4650d138140123993e5aa3a2942a5b02feae
- SHA512 4398551fcdfb26e8c67bc9fff0f40a1563579d93e64657b4e11ac149e70e1de2f4a4cf7564aa949036cac69fb79c5e3000f019b15f89b7e8a76abc97ded5e1fe
- TLSH T1693168003EFD0524F3B38F7785BB572485BAB8558E208A1E0041460C5022E15E13BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.