User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3d27fba11ebcbeae393335e5fc6f4d19ffda3a863ccc437399c4707d60dde2f8
General
- Target 3d27fba11ebcbeae393335e5fc6f4d19ffda3a863ccc437399c4707d60dde2f8.zip
- Size 803B
- Sample260817-jl2ckswbra
- SHA256 17fed52e8424ab282dc2f8d663164f5fa19ecc411f961d7708da8a029a3f1370
- MD5 5b439211cceb132037655c5b8374cdf5
- SHA1 43ec3c9870e3d334d682bc59862d8424b611232e
- SHA512 00343e27b1c1057ed1b9c10508aab29085db5835c58d591fe16404ac5e19b5793abbc6c99e9e2bf89540a5b889171ca13783a1e02d56666a0ded21cefa4dd16c
- TLSH T1AA01259831F51812F913807A3F98D9B0FCB062519ADCCDB97A294C20F7F4FC10615265
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7AAZ57.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-7AAZ57.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-7AAZ57.lnk
- Size 1KB
- SHA256 ac9bd0afa1cc2e2e678afb6b17c38ee63c12cbd21785b905842bce78d8eaa1eb
- MD5 9afc39521d19e8b0882ff29f65f198fb
- SHA1 4ca0a9d52aa6d4a1acf313a10ba607672bab512e
- SHA512 945c19e67ffad39dc4e5b28646c5cf788afdd90c38a04c902195efeb304ae6a042f35b8a6ccaf50a43fd02b699be65ff01a391bb117986a5a0aec33a9d5ad3bd
- TLSH T1723147103FF90614F3F78F7298BB5B1089BEBA668E25CA1D4140454C1472715E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.