User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:9f61e049686110cdc1ef712bd5e473a4d2e8c39327fad1f3545bb7e1d73e7660
General
- Target 9f61e049686110cdc1ef712bd5e473a4d2e8c39327fad1f3545bb7e1d73e7660.zip
- Size 1KB
- Sample260817-sd8w5atvfv
- SHA256 cd2a3383a59c17e187b7fb0ffe7d32923fa6479eb138a5f75177c54b13028275
- MD5 586f4c4c52536e0f362d0b5b5b343aaa
- SHA1 cb94fd5ff616bfc5fc71f9cc6024cdcb4308e019
- SHA512 c57e4d407aac15d777094cedf43402fd12ee02eaa020578b25607ede0ec8164e9931becdb048c5666358976525aa4db0597c2c39ff92354ac9956769f19f6323
- TLSH T151216660F29C655CC464613C74B7E1EB852773981188C7C7DF0CBE23CE874E601D4069
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NHBAXL.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-NHBAXL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NHBAXL.lnk
- Size 2KB
- SHA256 f4c5bae9ce3ae005b744ba993ce54c34fe9644d1a1c6dc3d04ae85f5fa832495
- MD5 54223a3f3dbe1faedd6c47d609ae7e8a
- SHA1 f96fc138240173f4e84296055e47de6596911840
- SHA512 d72c82350e474f0cce434f60b905ee2c023eb583bc02d8cdaba74c82bb1c1bc177c0d7150fc673737fcff750710fb445352837effa27037f5a9b286d0e1e55e2
- TLSH T1AB414B903AED00A4F3FF8E76EDFA2B14597F78624DA1D58D0990804D1432F06D977B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.