User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:6be9d30e1aa7e1d93426ceb4ee1dfe9ac9ef45128f2630fa1b123bbe5f114501
General
- Target 6be9d30e1aa7e1d93426ceb4ee1dfe9ac9ef45128f2630fa1b123bbe5f114501.zip
- Size 789B
- Sample260817-ndv8tayfle
- SHA256 921657521b94dd9670e58ac617de9a7ffe94b17f6632129ca202b6445c1ed6b7
- MD5 3df3374c9ee13b8945fdcb3da0303748
- SHA1 22d5a84a1059820dd7b1896e3dcb1551ad5e648c
- SHA512 35efcc2f36639c7eb42efa84172f7ab3ed427b0cff148edcd5cc21ca411ae9003540b7eede3d9640a0f55aefe6319e315e09d6aa2bde1aa87dd98cceaf956704
- TLSH T19601201E4809156BF4B09C79007B0452FF49F2C71D405AAAF2E9A5B42540FACCE8A2AB
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1OKC9U.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-1OKC9U.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdfiler.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-1OKC9U.lnk
- Size 1KB
- SHA256 15139d27ee40ef245daa9e81a4736409bc7f243c1c1841fee88b3cac5dd7b079
- MD5 488bf3ddf42f05b4e7c3c1a79dc3551b
- SHA1 bbc5a7af81c102d9a3703e20b883804e89c94151
- SHA512 520b64c07063901fa2bee974284908ba4b8a93950f8d80ae34e3a8f9ec1f31f675a61324057a317a49b23b93026a5fc00fea9d0fd14c47cddb01cbc50d29a8b6
- TLSH T10F317B103FE90618F3F38E7398FB572085BFB9668E20CA1E4140454D1032A15E57AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.