User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b9ba6a4f6dbd586424245a1dfaf6820179221210c768790466b451a70c121445
General
- Target b9ba6a4f6dbd586424245a1dfaf6820179221210c768790466b451a70c121445.zip
- Size 1KB
- Sample260817-t99zqsce66
- SHA256 0f76f9e84db0286f231b812b1d94dec2e3dcb24aee9f300f352657dbb410531a
- MD5 c73e7c5044b28b2a632311cb2b5d78d7
- SHA1 5bc6c25d2e2c8fcb989bf0c754bbe2c1658e7b88
- SHA512 884704db53bf1f4969c2688d976a13fdc1c2d70033a25aa114a9b38d399c9ac443964a171efeab6de6c8fcadcc36853d08fd5ca9976d65d09c11d8f1bd141bb3
- TLSH T18411B6843CA5FCA0FB13D5F71C73CCD62ADC649618F783620A8B469836DD0465E40A39
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OSJDI3.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-OSJDI3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OSJDI3.lnk
- Size 2KB
- SHA256 2c92baafead45667cee1459fcc9f749db3a43f470c68da6722706785b08db107
- MD5 60b4edbbb64568ebf6dffa24f6fddc01
- SHA1 3c5fd5e6246e371c6b89ed9510dda3ca16acc9f5
- SHA512 80d90a1b25d86e253d9b15ef89c5aaa599333ffcaee1eabb699cc792810c885973f819b5e2a242024faa60355fdb38f33e038b196f9aa42816fb1dd4a3b6cacc
- TLSH T11D4166842AED06E8F3BB4F72EEBE2344497BBD615D30C58E0440810D0822B05DA77B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.