User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7a5658d31aed75e556e3a45fd7587d55d2e298b78f9bbfc3f39a2480b96c8530
General
- Target 7a5658d31aed75e556e3a45fd7587d55d2e298b78f9bbfc3f39a2480b96c8530.zip
- Size 1KB
- Sample260817-pf3aksar6w
- SHA256 9f0262214f918139b80124b5dd5cd57f187d892347ec94b53d7e97a1daf256e9
- MD5 897357c79de3943572dd47781b395d02
- SHA1 bc484864c18842da26dd563b527bdba1405453d7
- SHA512 0705c89f02ec27bf5f7219e5dee1b849edc98c959befbee13d1d1f562b901c0f970d17bdca28304254102adf5eb54032b7863acc8c9f3f11b5230f1ebf2a4e6d
- TLSH T1BE1142484EFB6C0DF84AEA3C7A03A384A649136219D3F2D6D709E098FD62DE91990CD4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9T1GWM.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-9T1GWM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9T1GWM.lnk
- Size 2KB
- SHA256 87e864eccaba1a2f2f6b9da365a84aebda3ab6b06ff22385dd9604e025cd6b3f
- MD5 3f1765704d1bb03d26cfca5968f219ed
- SHA1 833c7c1c73bc0eae1cebaaa36b86bcb4dc4b371f
- SHA512 07d3c561d1102949aa309fd3689764d7d3e065243e021d8280bd540695e12ff15cf0860e025dfc906fa65af21ee8af8f0e6c0287cde7ecea4ab94c7c16c9ef3d
- TLSH T1834145906EDE0194F2FFCE73DEBEA360887BB9A56D60C68E0840814C0922F15D537B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.