User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:40f852e57ed4fd4696bbed7dfbe993a9dd63ee56af15d2ccd1cda0c44827ef0d
General
- Target 40f852e57ed4fd4696bbed7dfbe993a9dd63ee56af15d2ccd1cda0c44827ef0d.zip
- Size 812B
- Sample260817-jwvb1swdqa
- SHA256 76da8fc446695868f01788794d94dab5505bd57d682248630752322c27a8eb42
- MD5 28218c2f5408fd433c420fb6f457553a
- SHA1 164ea32faa17bcffb1287635fae13e681fa15da1
- SHA512 537996edecf7690ebdf57a85a667c6245e71c798a3d38eefc7d55ddd7496f9323015e3673b6e4d1e91ed02a79c34b31ecddb0e0c0589fc3b25aa1524d46ed9b8
- TLSH T107017552255A7A65D53B6FB9218341F30BADE5F1135E3E564680F8716DF8FF04C41064
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WAFQ6L.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-WAFQ6L.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WAFQ6L.lnk
- Size 1KB
- SHA256 63f92a62e4a17eb3f3bde5cff5f6161c35e7b46f1a8078eee3c838e607595334
- MD5 97c72ae09779972975707061d417e0ce
- SHA1 e5d15668c33d998218fb9cf5ab3c298348cadc63
- SHA512 5fd472b95ed6a2e1ad19148f160883d11671be0a2c53ecec063efee13e25bd61c89ef51d8ed1340b4ffa75564f893242ceddb7ad3a1c24a7eedafcd9a2e7b21b
- TLSH T1833147503FED0624F3B38E76A9BB672489BAB95A8D20CB2E0141454C5022E15E57BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.