User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:61c07759bd9b8bd6f319b991f682509562402512e7186c953836c712f038abff
General
- Target 61c07759bd9b8bd6f319b991f682509562402512e7186c953836c712f038abff.zip
- Size 1KB
- Sample260817-mkf7ssxhpe
- SHA256 7ffb72eb4452f028e2c5e69bb4512b46981a6fe013cc8cdf98deaafe54592f7a
- MD5 0a3e8ca21f95dd3c1d83edf5dc088867
- SHA1 d33a26a1a869c5328cfcc11c9bd8654589ef4e14
- SHA512 608c5ae3fee4f8a56731205f4be26d417441fd7e79824db5b22cab28c5280856650f4260e13fd97bff71c850a360ab1a72cb936b7b358355713638b23b650f25
- TLSH T1C421AA01805FD780EACF2D302EC576493509C048EDE0A2376430BB916C9B8D3EC8368D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9Z2IGG.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-9Z2IGG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9Z2IGG.lnk
- Size 2KB
- SHA256 5bd76cb13d6c2c3bcf6c1d3027a29a43d7568eca09cc625fc65f55e5b79b19b8
- MD5 9826383df14e74d3bf58ac642d34d8a9
- SHA1 2fe1806fb65c48fecc792cfea6ed87a70443d697
- SHA512 8b3dfbcf93ec528622992a11000f01b63dc2bb42de4b8d1dbc399cb9baac95fd9d33863d1555377c78210fb891f6602d1690ac204b75c5aa83d2aec0c55e1694
- TLSH T1924136802AE905D4E2BA5E72ECFE77114EBFB9564EB1C58E0C50810D1822B41D937F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.