User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:923a14aa7179a3bbc7306d25d3468f389199369e19cb67ca1a5001691acd6080
General
- Target 923a14aa7179a3bbc7306d25d3468f389199369e19cb67ca1a5001691acd6080.zip
- Size 1KB
- Sample260817-rbthzscn3v
- SHA256 c4806849a039e326be70b0ba51dd77e0f309a7561b131ce74b764d10380a2166
- MD5 1ce93c0bed549748fbd008254478a26b
- SHA1 4db46013151a98dd33bea5cc87e44e48e15bbd54
- SHA512 50a2967ab8df5761108e5ad3d369b524db268b694236f0b2d56a73b536f5c169fac9193aede2738d5d4e1841fafccff3212eb24b1ea99e86c48efb0ef38e08ed
- TLSH T13E215129FA474FE1D0239873BD06589DEBEAD2342821C6E69510AC1818F1A163FA0792
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A4ZHUZ.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-A4ZHUZ.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-A4ZHUZ.lnk
- Size 2KB
- SHA256 702428636a9a4e814288b96b13272679ba55f9c788dfe32bcaf9b1e43157297a
- MD5 79e9205a4aa2c5d7a60503620c5de7be
- SHA1 a49b9dfab1094f8dd2aceae7733842ad8a22174c
- SHA512 dbb353fc979aafcde2a6ea0372467f069977e9c4daff2c01634935d9e76ee0421aaa3b5121577c8fcad456c7eb28bb9a49e587ee6301419304453c750bc1dba5
- TLSH T1BA4135803AE940A8F3BB4E76EDFE6780457BBD816DA0C58C0D11810C1822B45D873B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.