User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:d0cda34faeb609a7baeb8fab2446e9d25d359ba79ce30a0c7861f3798795dc81
General
- Target d0cda34faeb609a7baeb8fab2446e9d25d359ba79ce30a0c7861f3798795dc81.zip
- Size 1KB
- Sample260817-xeef5axxes
- SHA256 d1cab1d8151e0028ac51cf0819296fb0725bcfd0bfcab688f29fcd777ee8379f
- MD5 458e00734fbb3617d09552a03cf39726
- SHA1 cd3e8d4acd0fba1ca0bfaf64982baf68df9ce48b
- SHA512 9b381ba785004c08796e5d7e4465f39315d05b12bfd6f7282b8abb66ca979dd714f928e1ba3dd3d3e481eed664c4143e7c444571b761eb8b4b77efc82e3702cf
- TLSH T13F218969FC6AECB0CEF7C5315D8E1CD1939A86540D0747E3C58964BA25247505AD1C4C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UIFCEX.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-UIFCEX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-UIFCEX.lnk
- Size 2KB
- SHA256 07ff050dfb7dfee2b9dbd74471e59352ba3f50e03b5aaf620a1dfd35b858e732
- MD5 fe13d41d9cd0560ccf82111f6cb8077d
- SHA1 2f27e03d4837cf5e0d89f9de3a760db406da260d
- SHA512 84d6384a301a9b9db34aca3b97852dee7a650ec6ff7e8ae87dae22f8750ae748156797437ab01ddf925b07e2f45b0f9e6cb012233b533d304b42892ab4280d77
- TLSH T1CC4126912AEA40D8F3FB8E72EDBE2B51487BB8515D35D59D0840820C0523B11D9B7F37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.