User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:47e369ec0c2ab4f5123dd1615f62bdf7deda882e5c12a075e69e2a80b8b25226
General
- Target 47e369ec0c2ab4f5123dd1615f62bdf7deda882e5c12a075e69e2a80b8b25226.zip
- Size 809B
- Sample260817-key5bawfph
- SHA256 e042cd077e22c2b4dcdf408e5721c468f33fdccbdc0a9af6f23ee95a9d9bac9b
- MD5 f8c87baf53d891e1c3a0c27ce5c8d1d8
- SHA1 7b2bc4774aaa5567c20d76f050e411713782d460
- SHA512 f4fdaca7795f61d39b6f36571680a1c5986ada41ec577126b067cdcc439f36df45c507e275d0e1895be9715daa59ce5d9d8bd9027226553a6269529b3d53f413
- TLSH T1F701754ED97A3F71F50EC8371D12DA8BD00D11214BC6130E79A339A65EBE780998ED4D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DBEDAM.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DBEDAM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DBEDAM.lnk
- Size 1KB
- SHA256 9a46aa0d8b8e345c96122de9f7c90b87ff800810030ec6f2dc85e67456fd5578
- MD5 ceae0d822b3b03577eff6f54425f86c2
- SHA1 8b86590bc8c0330526c603e40f752b5479955ca6
- SHA512 8dea942201fdd006b5f0b550b420223f8cac4bdc3e1c087b9a42b9a2bcfa153c6dfe49327268a81881a1785ac8881a7760719391c46731df536533a6e4388346
- TLSH T1873197503FFC0624F3B39E7784BB572485BAB9A58D20CA2D0041490C1422A15E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.