User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:6601469855f30da33db6346a29a964ae4387b1fb2be006e39d02a3444d44084d
General
- Target 6601469855f30da33db6346a29a964ae4387b1fb2be006e39d02a3444d44084d.zip
- Size 1KB
- Sample260817-mt8cmsyydv
- SHA256 c1b542c08ca1cd0045c885b56ed2d8a87ad2e553f6bf321b54d4b01156cc2465
- MD5 4095566ee4e230710bf642910ccc241d
- SHA1 1ab89b46a35cc72f424a6323d630a77d03c82dcc
- SHA512 6efe82a3380233e0cd012d2eaff272083796e12bb078d7b258af26eeb7faf81c8378e7a22994caa3d3a695f9cea19955ecc2e7ebf567ef6cb1f548051daeffb1
- TLSH T14C11751CE2761DA4E92D0DF18697ED4D7E3638A2BC00B20F51861EE24F60CE23741504
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5NTL6A.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-5NTL6A.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5NTL6A.lnk
- Size 2KB
- SHA256 79485d02f8c75a49b6ad747061916739613c2f2bc63ee8a442f980c79999eb01
- MD5 86b6bdf052a6ff24c00b97fd1f58742c
- SHA1 c98d7cd97c3041d819ee28887435ebc264e84037
- SHA512 35ed97e2bd1bb07690ce1141b652b55476dca1159c37355fbd19de26b0fb6077152b7c2f87ea8ce4a6497f15076985bd7fb9b1ed02dc670d5ae34270dee95325
- TLSH T1D64165502AED01ECF3FB9F72DAFE2751857BBE565E20C69D0880814D0422B05EA76B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.