User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:acdb8d11d8e988f655ead8e335335edbfb0369aa6168215fcc5d29682dfe26f3
General
- Target acdb8d11d8e988f655ead8e335335edbfb0369aa6168215fcc5d29682dfe26f3.zip
- Size 817B
- Sample260817-tfx33sdr8z
- SHA256 e19fcf177e65cc049c2063247b97846dffe01eccf6d1eced4255e9983d0f4d54
- MD5 c54cda66e88b39044ae50cc44d0080a6
- SHA1 02e838dde286ce8e6667b686857969dfa29a3b83
- SHA512 446821a4559cff96a1ca2bc371c0f2e35e7478ce004fdbee4aa8c865268c2a1642a71ca4bab8bc0478df416f6ac1ec7ce83f38ada8f0fc93f7e331453483610a
- TLSH T16D01C530AF0C8D43C983D530DA3C22C09BA7FBA5EA3995C6A0084447A8208B57FC1628
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-R1V8NP.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-R1V8NP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-R1V8NP.lnk
- Size 1KB
- SHA256 9ec25de96c145063e3d67804df77404522124f41dff2df8d108b55671c76bf94
- MD5 a17de92a72aa89f8b56644be8a038a31
- SHA1 6876733c1c4de3a4e02818f0e45a284b459445d8
- SHA512 551b4b1904dd2333cd6bb8365a299010e4904a71ccc8e284a1cb71b48c2b47be0f9fc37b2d765ed3a650250af135172a5b1a7faa865731827ea2b721cba43271
- TLSH T1FE3168103FED0654F3F3CE7294BB571485BAB9658D20C62E0141454C5032A15E13BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.