User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b3dfa6b0ad3b4b4fc56852cb275001e9120ef513cdaf87c417e54d7b564dc6be
General
- Target b3dfa6b0ad3b4b4fc56852cb275001e9120ef513cdaf87c417e54d7b564dc6be.zip
- Size 809B
- Sample260817-tz7rmace35
- SHA256 6ffec6c719c562eb68e20169bdd32df5e049a4cd11a154c7aaa6ef5275f4524d
- MD5 b42ce9c69e3ad366ae372683bf7f8122
- SHA1 a3fcc5b1b946b49feb484eb806860633c93d2191
- SHA512 f0705b4e3760f4a134a6cc84f076bf7ea86f58e5ca7c1677516eefd6a9749ef59939b4c049764d0b7381b92c039ab6f8b7d6b8b60709100040335717cfd65818
- TLSH T1C501F1566F4C32FBE592FAF556317A1D3533C260C6E352258187647400E7C85CBDA5B8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YK0921.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-YK0921.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YK0921.lnk
- Size 1KB
- SHA256 2ae403a231c562005a7fd5aa12e21c104afd8192ff9e12eff4ac8d16f4234c02
- MD5 7991e67fa6c1363f92968600dd382cbb
- SHA1 833891f82b371e2355f74a8242a0c7861828a15f
- SHA512 76504e3e9b9a41e86678dfc21d76dcda787d7c948f09e18df9f8b217e496b987d98effd6c298854f724f06c452c82a510757322a52bbd8217ace5c4d0d9118ee
- TLSH T1D4317B503FED0A24F3F78F7794BB5B2489BBB8658E20CA2E0141454C6432A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.