User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:9e274c479c087d66e51a1fbe41a2f28549e608d71aa245f8c666bcba74b14d16
General
- Target 9e274c479c087d66e51a1fbe41a2f28549e608d71aa245f8c666bcba74b14d16.zip
- Size 790B
- Sample260817-sdsvxadj3t
- SHA256 0f3bef098b5c9dd852f081a3de5f567038a0957fb8e020d61386fe3fb993df27
- MD5 fd0bb4b49fe2999afd20fa58060e0e38
- SHA1 6ad3bfc38cd790107933f1afa9cbf84eb9086149
- SHA512 3ffb538a5b234ccb63c847632e88a6584a652bd385c6bb058b64a1c692291e09cfff7ef459785cd9eaf6bbe80e25ad9994187108fc14e02a0e20f4d68825828c
- TLSH T1D201753A4D2E2DD2C5A6803FE52697C0DC6118C00BCE476E142E365309697C5EFB2398
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RNT2U7.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-RNT2U7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdfiler.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-RNT2U7.lnk
- Size 1KB
- SHA256 db1eaad5fbeb036ca477c78e86eeff8ad66cfc6d56a32e64004770e678fb2768
- MD5 5675a8d0fbcbafb0b7beaa6228791524
- SHA1 5c58d20bae71cd5d572fb7232c735fbfb292b55e
- SHA512 51bf52f1d0f1b01321bda2e863a0383e8c0acf39cae840b1d2843f43e4517e0de1d32742fd0bef7069c74dce88de658f292eab61ea1242b70ce1f918aff43464
- TLSH T11D317B003FE90658F3F38F7394BB5B1489BFB9658D14CA1D4140454C1032615E57BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.