User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c491aba3a0e2068455e25cd907ea04b998ab41ad0b7e969a484d8d973facf726
General
- Target c491aba3a0e2068455e25cd907ea04b998ab41ad0b7e969a484d8d973facf726.zip
- Size 812B
- Sample260817-wc8frawale
- SHA256 3e3dcb612143df0ed26663480c56f67d16a0bdc42710e803d0326f1ee5383655
- MD5 b074f78860a16c025c1dfe5cec67638e
- SHA1 c6429c7cdf38bce2be3c44bf6e262cf280292789
- SHA512 c9e828bc6d2dd6d5531be07dedc63186951636198e448204fcf09a47bc19d86275f621068f9964f55e6b023d6a570c7d8a964993fab6b5dc7f8f733cef3196f4
- TLSH T1EE0146CE670E4211F8BA1D3834432B819D646759554F3425DB2550B41D37A449B5F199
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0WZ1Q7.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-0WZ1Q7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-0WZ1Q7.lnk
- Size 1KB
- SHA256 956799a37e291c85fa51a17018eea7c6f2d74ddaaa063a1fbffccb8270c9cb36
- MD5 36b13bb975ee7b28dc057d39799ba6f2
- SHA1 ca058684142c3e59be90a0fd853cf6dce0c8d3e7
- SHA512 e8038e8c58b623b6f7b4ed73995a217fd17028dd7bb496cb69c8057bd06e3421db33a963eae2b7b4199cfecdf3455a235f2e749140d53f30149d81fa9c697cf9
- TLSH T132317B503FED0624F3F38F7794BB572489BBB9A98D20CA2D0141464C9072A15E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.