User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:e6cf4a06b83e49244afdbdb881f257829c39824d712c5ed3c0d97ed40f4cfa61

General

  • Target
    e6cf4a06b83e49244afdbdb881f257829c39824d712c5ed3c0d97ed40f4cfa61.zip
  • Size 814B
  • Sample260817-y4ezmayfld
  • SHA256 cda08e391ed380d50db847d210d547e68714f2320ab50688e8f5a0fa7bdbcf07
  • MD5 SHA1 SHA512 TLSH
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB

Targets

    • Target
      DOC-Y8VSR9.lnk
    • Size 1KB
    • SHA256 944417ddf8cd1603f00eb7bf771a23f1992229c05a987dbbd1497537adce0e91
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks