User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:e0b60506089685c04c69ade39ed4ff1a55fd5e28ee6f02ddca43d40246f1d689
General
- Target e0b60506089685c04c69ade39ed4ff1a55fd5e28ee6f02ddca43d40246f1d689.zip
- Size 1KB
- Sample260817-yr2ymayyht
- SHA256 c551657b648a65fe4695e94f9afab93d9eec37abffc3b77594a109981753d233
- MD5 92490ada49631e861df2eae134c7f2b1
- SHA1 5e00355605c2a37b82306b46a8b8903362e927f3
- SHA512 0c06046b783f888a539556f2c24ba1c60a42addf914bc12296f4b176be202b139b536e55bdeb0ab237d9babb50ab10fe5caa9ee7dc4bd45569f10bc592dcfe21
- TLSH T1DC1135B592874C85CF0194F4731566CDA325404A596496B310DD2CBC4B4C5ABBB925D3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3T608H.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-3T608H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-3T608H.lnk
- Size 2KB
- SHA256 b5202d21e2e229df74128252367694f1374dd8fff5bf9eb9a5ce7f0db4b63f19
- MD5 b668a255d4b314972d39d3732a229a7c
- SHA1 16534a4243abb84cd1abd5746f46b1732db07c46
- SHA512 68fc997cf5dd2199b0ce8437cad7bd98438ea86ef9537f8f3280a242dfb67a9f15ba8ce26f77af180779c06d693327abce8d08d3e4c4477b93cb7bac37b4a1b0
- TLSH T1984137A02AED01D8F2BB5E73E8FF631149BBB9525E70C68D1910820D1523B01D937F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.