User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:ba84a66cfdbff3efc74bc507aa6fa0d0bcab4e2866d12d2f95b55311725a733b
General
- Target ba84a66cfdbff3efc74bc507aa6fa0d0bcab4e2866d12d2f95b55311725a733b.zip
- Size 1KB
- Sample260817-vjftmsv1cw
- SHA256 5325f0f738f3605772e4a26e327cb328050d70ea83a396778d1f6005c2f6e3dc
- MD5 b611f54f17ec438c7874259e4e4c5882
- SHA1 15bc361b316277e92daeee3e5ee3dca6c4bd4c66
- SHA512 cb8b6c11e41c626e4df56716929406004e229e9104f695c5bb82168637829d7854af9ad5ef8ca8bb11691e411b97e6ed584beb46cf52b5c3c3f232ae60ddfc8e
- TLSH T15421B64E4FE188EFCAC3CF37F4996AA22402E5EC86DE8991FC0039F0B1214858E1D701
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OZZSX5.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-OZZSX5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OZZSX5.lnk
- Size 2KB
- SHA256 41ce15e6e82164a5573ea98979a134af93cca9d354887e65de094c84b9094f66
- MD5 c0f536853847656b251bbedb7b708f43
- SHA1 2ba26e44dcf3ad0fc384e263e1cd70ef31bcd614
- SHA512 729859864465ff4f22dbfc1843d094f0f18228a19f74c9da5e1687f452467d49d381c543d14589f2f4505a53e185d988262d1fb3ebf41b9feac3dadd548a2574
- TLSH T1A8417C902EEA41D8F3BA8F33ECFA674049BBB9855DB0C69D1C41814D1822B05E177F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.