User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:af33c02a5d7072074eeb2f90f4cc79643e40854a657edf7b2f5fcb2c9d130d3d
General
- Target af33c02a5d7072074eeb2f90f4cc79643e40854a657edf7b2f5fcb2c9d130d3d.zip
- Size 1KB
- Sample260817-tgjbbaej2w
- SHA256 05bf6b48c82a554e46d503b31533f8a7c7b3c819eb070c18efc778cf7adf6707
- MD5 dee459548a3d749a5d5235e57c70d649
- SHA1 155a6c38feac0f221cc795e21d5f4b8f85a9180c
- SHA512 d59c2feac59984436932ec0923d1ad0698c28a98143f9befd1407c584d95281d75caa44e557a598f58445e5651d2896edbab4f3156e6e6ecad83307054bb1e96
- TLSH T19711750627D74895D494273181915C870FFC62BC9F48E26DEF8E18882F2D2C64AFACDA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZFADWB.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-ZFADWB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-ZFADWB.lnk
- Size 2KB
- SHA256 237aaaf4fe6d7f25cdccc4709bae87fa10ca2706185f06c5fbb62713f3d47554
- MD5 e5ea8d3dccd1350cc20d6a3ac05d10d4
- SHA1 2266dcfd9f107db47c07fafbcc137804d9b88b35
- SHA512 e11c0ab0cc53aa78be09ae2432050830825a20ee9077f90d542282c76ad5cfe6bc1e2798fd245010649bf715512f8eb69db94b990ca4baebf2d226fbd2b9d403
- TLSH T1E04137807AED15D5F2FA8E32E8FE271085BBB9529E21D69E0590814D1832740E177B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.