User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:53cce750aae113dcc1cada8a7f48e76b5057b7511015a7a60487f3018aba66b1
General
- Target 53cce750aae113dcc1cada8a7f48e76b5057b7511015a7a60487f3018aba66b1.zip
- Size 816B
- Sample260817-lg71nsae64
- SHA256 e846a13765389b5e3de75850685805d2e3220cce811e8364d282e56cfb81ee41
- MD5 38ccea414441ae2a41b53b679139e2ed
- SHA1 802948cc5e8b840477d840650b056d91bfdd5939
- SHA512 49ba187e5f6c90fd54a0561f42509993d007e632f5164e1bfef444678e02cf583d1699263dd3be5c28f518c4ce416502b45caea65e049745959772b463b2e81c
- TLSH T10E012529235DDFF3E525A5B0833483547A3039A04FDF24D58D175464B6755CE0E9F50A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A75DFX.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-A75DFX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-A75DFX.lnk
- Size 1KB
- SHA256 dd0f0e2c921d75c4bba3036ada1cbec8510214115f3d7eb85653dc6947ef92e9
- MD5 deeece72f5325993fd40cf58c73523d4
- SHA1 bf770daaa9fb8b4b1077a756d3d75526a1005fe3
- SHA512 37ef7061a7b07a9f489ba1f32de2e538f9c597c70f83a1720a294ce27446d23c6a583bb0c8c7e59c61f33cfad12761246097a4946599136577e96be47ab4ebe4
- TLSH T1553197402FFD0A64F3F78EB784FB5B2485BAB9658E20C62D0140450C1132A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.