User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3419db94342954b996ab0a7772d90cf8b62d83efbaf83e97a0b7d6b71fa651c5
General
- Target 3419db94342954b996ab0a7772d90cf8b62d83efbaf83e97a0b7d6b71fa651c5.zip
- Size 795B
- Sample260817-hth1javgnb
- SHA256 292b7c30e2714b8ef7952d14cebbec685c464ff4a97dc95c2fee8f687d77b57b
- MD5 8dd4506ca87eed8584c0676c8e2c6623
- SHA1 af7617d4c043d56a9c717a4a0acf2592bbd2d6c6
- SHA512 bd0df4f7ee619d3a59558f58dfea68b6dd40255a276a3d1315642949ad925711448b558faf79853ea41ce47e8629b3fd21046dd2f7216cad1fcd068ef5c09e8c
- TLSH T1C201259351591E79C5DD5977D61A5C12BCB38000171E7783C0E64E647D289974337E52
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0382N9.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-0382N9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-0382N9.lnk
- Size 1KB
- SHA256 247e98cb283e11f8cc6de2c176ac5c6315005505a11bd754c61781f48facca15
- MD5 e96fbff1e3d21034fbac3eea2ccdcfeb
- SHA1 a171d6a88d4ec86b50f737a18edaac2e5cf10129
- SHA512 d0041d894551c7b0d78cc34bb926b05ca4862bab5a16c27b52ee87ea9aa4b8154c9c9b3238c86b8e0c2c96f2b26012cbdddbdd55b6dd1d25b3fd2abd7edd1352
- TLSH T19B317B003FF90658F3F38F7398BB571445BBB9658E24DA1D4140454D5432A15E17AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.