User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b9ab553d271126a809eb7c33029a4fe612144c49faf44d1794f6d4021eec2f61
General
- Target b9ab553d271126a809eb7c33029a4fe612144c49faf44d1794f6d4021eec2f61.zip
- Size 1KB
- Sample260817-t98rnsem6s
- SHA256 786b1b2fdd3f8d8fdf91c65aa57164bc54f122c2eb7ce4d61ce9a050ca51e413
- MD5 5b9b85cdb828913a53f66f39ce88660b
- SHA1 ec9f7e1c667e7f00b9489e2cee9905c38bc2f243
- SHA512 3accf80911b0f7ab7e986f39302fa6e32c79283eb376d129c96daf05bed8c7326998a2a864a5f2b9174da10bb7e4d5a0f4e511530f2d304154de7bdd291b3f2c
- TLSH T1A51182A0D1FD0CB1C5A488B8BB0AF8DB113801621692A372E49ABCC247DE8C94F30810
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BM9VN1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-BM9VN1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BM9VN1.lnk
- Size 2KB
- SHA256 e008bde9b903ac091bd8cfb51d7eaa99cdbcfcd8c474968048e30b5bb8cba6c8
- MD5 e425004c6f7ee920d3ac6ad125905469
- SHA1 6b9396c32a2e94033cf6d2e184d0ff30ee1f7bf9
- SHA512 1efc102ef2bbcdb513933585b513cfc8edeed7f4c83eaff385633f56df613c1b7487533f5517742979a0ab5bfb6127c07c5e07900be920493dcde4b7ff873955
- TLSH T136417B802AEA00D5F3FB8E76ECFA675049BB75515D60C65D0850820C0922F12E977F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.