User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:6b6e1084db12aaea62435ff519e63ffd5e14f2fa114e9cd7b1c97a815d9164bf
General
- Target 6b6e1084db12aaea62435ff519e63ffd5e14f2fa114e9cd7b1c97a815d9164bf.zip
- Size 818B
- Sample260817-ndsspayfkh
- SHA256 a45869695709cba594113ebca6e31a2974543cde670f66770171b18065f3f981
- MD5 a73841fbea29623f688598e724f6d797
- SHA1 21a284024630628fff8013be8e921bb9130938e3
- SHA512 ded36eadbb752e11af0babe7376ce22c014580a33925515ff9d183e221d98bcd788cd2525ba56fe115247fd4b33aaff0b8bcd60b8e49b9de0059487e5eb6a182
- TLSH T17D01C5D7888FBC69D1243430C431FA1922A81AE0FF80E7F2C30659909F10E98E20BF20
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LE6547.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-LE6547.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-LE6547.lnk
- Size 1KB
- SHA256 38e76371f9af6e7d08ee400ca0497855cd8c7b60b029d32c3f3878e05accbbc0
- MD5 f4a49b94c32b760dced6c63f57db1c07
- SHA1 6a440652f8a121362dfd01138c4692f236b0f094
- SHA512 2560e7f7f3524f3267835d7976a937aa1a86f3edffd2460fd83cccf3082b86f43b84b4decd66ed2c766e6f4e71858586268dce4c267b5d3fd7b220c2943967f5
- TLSH T1503197103FEC0624F3F78E7384BB572485BBB8968D20CA2E0141450C1032A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.