User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c346a192b10e4051ee0214c7f4e06ddf34406c4c2b0719db599b7390e11fc89b
General
- Target c346a192b10e4051ee0214c7f4e06ddf34406c4c2b0719db599b7390e11fc89b.zip
- Size 1KB
- Sample260817-wb1drawaja
- SHA256 14fb7e020561207c32d480990ddf9167b4db23e0cd4213e97c64ad706b0055dd
- MD5 850babf1ce1fbc001a35f2f1ab105b59
- SHA1 939435a84ac7ad5df633e9cd1684bd9abde57241
- SHA512 96153d5a9ca1deb011cf59c67d5a133a2d011f78e00936ca410c45985c2e2418207be48c34648aa785eeb4e4639b0ee3f0eb4d3f82d44e1363aa588eb33ce84a
- TLSH T13411B606A9BD2DF0DA98603252647B6F05E21478810A46C7029856F15CA6CD26B0E8F8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FZZPHI.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-FZZPHI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-FZZPHI.lnk
- Size 2KB
- SHA256 911f8a8f19565b60e0998c154a7e836297754092d01c95014d6bfe701738aa58
- MD5 123af2d998741b1fe8f41bb45e5e3397
- SHA1 f08feaaae271deac14ff438cae1a0b15695ac2c1
- SHA512 5f6d631939dcebdae56ede2e438246d9d3d39f676fd88c02d161a19ea959b5161662e44bf1c24570988fee656d7861b8334a1a31c1846e593f3cb0f32c981fbb
- TLSH T1684125803BED01D8F3BA8E72EDBE6751997BB9628D21C64D0890814D1422B05E537B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.