User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7d59721145db335079128569273564db07d3d95a1be27f33aa4b98b388a5674a
General
- Target 7d59721145db335079128569273564db07d3d95a1be27f33aa4b98b388a5674a.zip
- Size 1KB
- Sample260817-pp388szfne
- SHA256 17e2d5725db341ea9992d3d59b860b0d0f904d1677a1828e00972b7bf8b82728
- MD5 f692b5140072ce1f7a7ada7e8494c368
- SHA1 2ec646c5e21d118e7e500386fe795ab8e68a9889
- SHA512 47344a6f1bfc00d3c1255acf2984d67dc16ddb305aa2d4e41745317a0c9654ede4e54b1b8d87c79014e15bdf8c48da1778dae4cf20ad21a97423b49a4b1a8527
- TLSH T1DC21E95F3E94F814CD65A83E225B05B813ED6BFC4DD24F0B5508F2DA098704B7B80D68
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S1V5WI.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-S1V5WI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-S1V5WI.lnk
- Size 2KB
- SHA256 5c976019bc659fe055b7890569851fd9798270d687a71595021d66d00d7f70c0
- MD5 0037368398c2ce51d277e5909a44974a
- SHA1 fc5f8a810a4caf34f6a244280d480c3e4a6bc5d9
- SHA512 d2c851af97d1f9553e366d1b9bd56b58fce1c2448e7a64b48db99cdbbe1083058b30ca172cb38cfdc33f2885909d6f33aaeed63866ad4e511e6a3a36b9fca485
- TLSH T186417B813AFD01D8F2BF9E72EDFA675149BBB9526CA0C65D0C50824C1832B00D577B57
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.