User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:92fcf53ee5cbb1fc49015354502fcd12373757b10784e820225a51db20119fdb
General
- Target 92fcf53ee5cbb1fc49015354502fcd12373757b10784e820225a51db20119fdb.zip
- Size 1KB
- Sample260817-rl5zrssbnh
- SHA256 be5f5113399b43534805cc8600262872c13395c74b6b52bbf5c134a9d9933a7c
- MD5 833d57a97b3fac905de0e39b779769dc
- SHA1 c08dfe8e0d590c74b5ef40ac59b9135c2de01e8b
- SHA512 a2178ae75bd45fd29ab237ba5cec54e8a55c192cde67d72bbe1f11ea8edc67ad1d4c9d59dd740a711ed5fc2446c348626f48403a706c0462e523545b576c1ff1
- TLSH T1DD21964DAA35CA5DD80F58F186C3720611C949428356BEAEED2CC8510441FC2759DC32
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4152QO.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-4152QO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4152QO.lnk
- Size 2KB
- SHA256 1be5f7a2c78b815919ad8408dbd56616ed5595c62bb44e3da87af5469202db1d
- MD5 1bd4c09effe9741d324723eca8164375
- SHA1 65f95c7b833325237ae97954a672ca9dd7951180
- SHA512 e8784f7e137be6e6f49678b43a431eeb95fdff386531158494516f3b7079eaf6ee758c8530accfabb739b511433da3867a43e27a95fa57f5c6cb268aa8361a29
- TLSH T1FF4157A03AFA05D8F3FA9E72EDBE571049BBBC454D34C68D0890810D0426B02E577B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.