User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:57fcffbd939d1911fa4187a968c7496262fbff6a81d29f891db8678c3c090444
General
- Target 57fcffbd939d1911fa4187a968c7496262fbff6a81d29f891db8678c3c090444.zip
- Size 1KB
- Sample260817-lrxmpaae94
- SHA256 eba812a825bc1c8e54c0740812b6d1ab64e87f49b3ef9a37d0c030a807e8081e
- MD5 cc1887ae512334e0eb6f2bbc8013113d
- SHA1 56ae990e794d1f86654fa14a4041c594a2917f81
- SHA512 2230144de1f47a9d3226120aacc63c5aaf27c22809ec7d2efaf7b155854a9e4310cc50303926ad62ce95fadb0cf4d6a6d4b2dc8619a68fb43df2c52dc26d7564
- TLSH T12211E9D5BB2A5CE5EDAFE8BD46C8C0812315647C4C80C2C68F0C7A17219B7C09D4B6E1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8E5ZPM.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-8E5ZPM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8E5ZPM.lnk
- Size 2KB
- SHA256 43aaf34d429c36718c2b215a8f6b5f02c061e4820db97d8c245b0cad9b50e342
- MD5 daeaaeb58001c85fc940c1824630070b
- SHA1 680a20636580872d91a82b279ab7594fd013e0df
- SHA512 6efb12a4e0d1f5f675e32d3d3fff6ed9cd37323c27d83f988f97c53755df3e023b42760f2c409369669b562f9efafb2a1f37e981b4ce7624f9de9b23ffd88212
- TLSH T14741485039EA10D4F2BB8E76ECFE271049BBB5625DB1C69D0894810D1833F02E576B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.