User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:66211ada99a7203521ba99af912e60682d87655fc6a5de7a2c7361b26c105dda
General
- Target 66211ada99a7203521ba99af912e60682d87655fc6a5de7a2c7361b26c105dda.zip
- Size 793B
- Sample260817-mt89yayydx
- SHA256 61f4fbbfe998297ea2f9b4f98f077164fce201fa8069bd29157b736f85decbb6
- MD5 bcf8466769887094b5da6ec900a68e69
- SHA1 e4a19cf3c80edf1a844066cdd6acfb2dab6316b0
- SHA512 f1ce26506f9d004d348f1ab731a0265eb21c286b11f782c77719323db13baf5915d48b5b5b9cb4971f21b373a5877756334c8ddbe5053808e2cd7b143cb3e9ec
- TLSH T1E701F1198B9D3749DF8C6372154AB4D0A012BC904F49638EC1B44DE09F64EE97A4B926
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GIMZ71.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-GIMZ71.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-GIMZ71.lnk
- Size 1KB
- SHA256 1dfc976eab86ef9f6701702f14223feb0ee8533373b938bed97c156d432acb19
- MD5 4ccd1f22b7b773cf8b64b627460301b4
- SHA1 738e2438a99d6298a74c2b5d3c2eb7bdd4b1689d
- SHA512 32b7638016acce18c66da52f0034e4aea2dff2581b6e2e35dfb3027670444506ef67b386397bec34db26cabf17c6b2a4f3b5a9299b2c161928c326b8665a5ebd
- TLSH T119317B103FE90A18F3F38E7398BB571089FBB9668E20CA1E4140454D5432A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.