User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c695b87edfd1822a7c959f44aff55b0f90155a5cc8023acf484e2b2be20e313c
General
- Target c695b87edfd1822a7c959f44aff55b0f90155a5cc8023acf484e2b2be20e313c.zip
- Size 1KB
- Sample260817-wl1ghafk31
- SHA256 b6f3de1604ae49b434f6474c182c302b1811294acecab83ac34ea0940109d093
- MD5 f8face8dbf97e416fa08078882d3d20b
- SHA1 a31a9232ee9b0e2e02445fb9727f7773a26cd791
- SHA512 160d81ae1f540cab8d34f7d0e02bb9491f6ed613556e5ae281ad059de81bce551aa430517d4afdcb88e1e2c336aa9258ce11904e8aed3ba32ecf6c85cf4a8c22
- TLSH T19D11C8AD8F0CBE18D72782B10955A48248E30AFD05E237EF4D33C9886C10DED6EA15CE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H5TQE6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-H5TQE6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-H5TQE6.lnk
- Size 2KB
- SHA256 d151e241aad55b47c81ffd4523995f6c0f5ef2f7a1033e4dcc055e0f7317b637
- MD5 c26fac0b098b0ec52de164bf8384e71b
- SHA1 f25cf2d96d3e5d6c3331b7fb6bffc59f1893a60d
- SHA512 10c0592a9014faf104daa5fac4d4c924f08f2b34fe29ad08c70d671e9ec17b988343b9fe5740f9547cacda44900b52f9f840b19737ae5946f963c0a42073d03c
- TLSH T16C4134807EDD15E4F27E8E72ECBEA791457BB4A25DA0C66D0850814C1462B04D177B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.