User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b42e71fef5d9a659af677bf86afe261150b6259e9d38f986630b52bf857fb70a
General
- Target b42e71fef5d9a659af677bf86afe261150b6259e9d38f986630b52bf857fb70a.zip
- Size 1KB
- Sample260817-t1fpjavcka
- SHA256 cfe3aeb1d3408dfdb4f3098678c8adfffcd71479646af6b4e9f60df0d71dff45
- MD5 6074ea59cfa6dcac0dade41d5a1a29e8
- SHA1 78554891306a7e7a1c08554570362158a258d099
- SHA512 965fef1e02e73c000e99670994b14ac2ba364ac8aef67cb2037b03a076e09102c2d314cd6fe25ccd5b38af24c9602603273a98937f06d67109253a9db61815bf
- TLSH T10311D8A83E5DFC3CCC2581F386CAF89831F184C85039D5DC6EEA41B470517B65ACB200
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V81863.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-V81863.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-V81863.lnk
- Size 2KB
- SHA256 6033ed7afd263a3fb9c8196e9fcf46d035d91519bd9f6eaac336398d836ad709
- MD5 de25d859e2f0c2adc55246b2a015def5
- SHA1 d6d7a04616c0848a8f4aaa3816a092eaa6760a89
- SHA512 078464e4451e126af8d10160487f2f5586a57c0cd72840397124c8c02210648a87b37405e7cde1714b1d5ae774fc9533c17a45bd06c4dfce9a60e923b88940dd
- TLSH T19D41D3806AEA15E8F3FB5F76FCBF7750497BB8129D60C59D0950810D0822B15E47AB63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.