User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:77e6ecb7ae556ad6c8c5ba0603813c2b26db19ce7f855c187050a381d2fab160
General
- Target 77e6ecb7ae556ad6c8c5ba0603813c2b26db19ce7f855c187050a381d2fab160.zip
- Size 808B
- Sample260817-pfpz9abc27
- SHA256 d6d34ac6ef721ad40846ba37238bd42248a240e12f4774ad2e4884ef98905cee
- MD5 525aed53597550963fcf425044e8083a
- SHA1 4961e8513deb59804b05dfcaf8c5d06dee7567f0
- SHA512 15dfb9f54b3b21927cbc4e2db06fc67c87e010a794c651fd4dec1fc46b4b8c9259330db034a09dcbe81aa1aaf481d3df1bec5d76846a2c5ca489afda823c9f98
- TLSH T1EA017083566ACE1BEB854BB80190A8E00981D00AE392C75B87C7CFA71837F13CAF1027
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YB97LH.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-YB97LH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YB97LH.lnk
- Size 1KB
- SHA256 bca615f25f82ebeba59601f3d312b1322a230dd03d1e91f28c0f73d421384ce8
- MD5 21bccbb74736906cdda4fdf310f33859
- SHA1 a15c3fd2a06b6629249f7051c61c38a92e38f359
- SHA512 fa411514d87f04517b9a915a54506fbf838b4901b7b848e9f23f0175ac304ba9dcd3808da3db71526e78bd7db62d7dc35e5d584c776b92d37b7387e23d766c41
- TLSH T1623164103FEC0624F2F38F7288FB572085BAB85A8D60C72E0041450C1022A15E17AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.