User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:9095a7b16209cda7bdc965077279d0d606b754f5a4ccd7a899efcd2df6489634
General
- Target 9095a7b16209cda7bdc965077279d0d606b754f5a4ccd7a899efcd2df6489634.zip
- Size 793B
- Sample260817-rbc61asamf
- SHA256 e5f39e1e0871b6fdd5771eba3303545f76d1905b399bc72808fb49fd940f6ebb
- MD5 80924b75a8c30495c63fe0e7faeb8e4a
- SHA1 d9899565cec324b1506e9cf3be63c64a666f4a71
- SHA512 e6befbec316af9dca2c2b0120bd3b1fb31d5a4739cc7fe182a8e5d89e9824120f7a2c89ea44db75f6506c8334715ad35a0c25c443a77ea9855ef2e5dbc2fc619
- TLSH T1CA0125687E4EF661D913943D14949E5601E8D68147051FAE276FF423F527F0A47360EC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RQPNT0.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-RQPNT0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdfiler.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-RQPNT0.lnk
- Size 1KB
- SHA256 5df70507177a0b95081718764a3c66bc0551511de0755876432ae7ef803d0a96
- MD5 ea5fab72d4911759ba5c6ab475258a09
- SHA1 f8f8f7817fd6614cd9d1bac2db6d7d4839ed7852
- SHA512 e62affffb04de5594472540422a88c4724c6f587bef0b8a32f0289e5208f1fa3e189878a20792a9cde127c3ecd4767edb0137fb8773adb0d0097717d09262cd1
- TLSH T127317B103FE90A18F3F78E7394BB5B1085BFF9A68E14C71E4140464D5432615E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.