User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:353ceb44759063bf5cc959e7f179e9673d0567094d10701ca473dc7e3405aac1
General
- Target 353ceb44759063bf5cc959e7f179e9673d0567094d10701ca473dc7e3405aac1.zip
- Size 802B
- Sample260817-httf9svgqc
- SHA256 2018b89e0e7b042a9fbd32c994409ce281ad7177093e81b414090d542229a5cc
- MD5 17400fd4c9ab491003b3fc8b7cb0c06e
- SHA1 7a54192f237bc6b9ea2bf73fa920187762fb53a6
- SHA512 f2cdccf58858d732ec20cc9f85f3c8e670f55a5d7a7fdb51e02ea2ad756425d3788cfcc7f89452a1a9cae1ad197f8228ca6a9d3a5d043e419e9d358086ddd33c
- TLSH T10D01416993EA4B20DB6294B05374A6115C64A39A009E11FA0645CCBF89602B15ED74F0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UDCMHW.lnk
Resource
win10v2004-20260513-en
5 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-UDCMHW.lnk
Resource
win11ltsc2024-20260709-en
4 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdf.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-UDCMHW.lnk
- Size 1KB
- SHA256 74de65f5593e99722b90388bface941f16f8aa1ab386fa091f88ae3736126727
- MD5 a5643b45b57cc3067329fc7f1190ae29
- SHA1 f7c765768fa6406e699edde4db5d54a84b59bcd3
- SHA512 d6b0272214036f5aa2b771f166fdc789bff80fbab6effd35a003d87b3315bddf96baa1456124cd7db4f89ceff900d9a55628d55589f9eea183f18906104517e1
- TLSH T1663147503FED0628F3B78F7784BB972485BBB8568D24C62E0541464C5472B11E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.