User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:85fe20a137d582b9cd2c41175d86dd6c0d2edd2ff8627c8e675007857f5fc98c
General
- Target 85fe20a137d582b9cd2c41175d86dd6c0d2edd2ff8627c8e675007857f5fc98c.zip
- Size 822B
- Sample260817-p9mf8a1zex
- SHA256 90b658f10a9739d42fd233629aa5eac1998c3530651b6750d76646ded7d1b22a
- MD5 a104a8289a8801a349527fc7e8975940
- SHA1 1adc84a2d1fd67834a91abf441e441e2e6f8daa0
- SHA512 2369848e280555c87436555cbd2b8483ddce0a2bd3abf686060d9e4d4b1f4aecf0943d968a6d35a7577b489f044002f089e0494ba38f31e33aa72a22bc1ba76c
- TLSH T12C01C5CE3A0950C4DCC23A7ACBEA130F72408792DFC0A87A45822836CD45D53D907793
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ERIUJD.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-ERIUJD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ERIUJD.lnk
- Size 1KB
- SHA256 b18e85b601db34b1241825cd8f59debcf649e537e23286dcdf57a7a534b84e5f
- MD5 3f6a8a27d3a3e12a8c78e83f9491ae7a
- SHA1 9bc54b5ee299c818cce85f432222870dce074dba
- SHA512 92c2565db6f1619a4983cf7d3e8fcc2e1c89d9a00534fc0e931a6c7c0bc228a38cb86a8498713288e1e2e881b93ff6094dfcf8e413efa0d03725b7ffcdb8a84b
- TLSH T1403197503FFE0624F3B38E7384BB5B2485BEB9958E24C62D0040454C5033A15E5BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.