User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a5bc99cb8edbcdca08acd7c8cf34131bdb4055a38c5c79e58054b214bb481922
General
- Target a5bc99cb8edbcdca08acd7c8cf34131bdb4055a38c5c79e58054b214bb481922.zip
- Size 1KB
- Sample260817-sxvtlstcph
- SHA256 45fa8f86349d8c1693bd473ed1b00adba19d0a9992ab587b365239077b69decd
- MD5 b812e8a13a620414b39191fc70c69841
- SHA1 21a9b767bf037fb9b166a26a63fa1234a93e5bfb
- SHA512 28c8a839eaec02837f677f5da0db48efd4d3388adeb5da7bf08339712142008d3ee57934c8edbbd70dced0e9233e53dc2c9b053287cabd33d0a7201adf7bb56c
- TLSH T1E12167DA67E73C49F8B2F63D0228434A53F4316544A0CE87481A74912179DB119005AD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G6M9N9.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-G6M9N9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-G6M9N9.lnk
- Size 2KB
- SHA256 88edef1080f527256fed9c58a483904b42b2a0a952864932ce3a479f89b36da9
- MD5 8a8b9e586c0886854811679a0cd47fdb
- SHA1 df40ff2ce943405d29322ee405a4a194c31acb2e
- SHA512 dce5ddecab3a5257c3132b0232245d5f0f97525932e2f091c676c3791d2ee68769a166d5dc5bbec45bab25ccafcb8213f12434472ea5b041d63ef7db6cacd956
- TLSH T1A64148803AEE41D4F3FA9E32DEFE2760947B79226EA0C65D0C50814D0532B00D576F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.