User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:e14d7acf288d0a1b4b35804e924784f492154afafb6ca424812466656f6d16c1
General
- Target e14d7acf288d0a1b4b35804e924784f492154afafb6ca424812466656f6d16c1.zip
- Size 813B
- Sample260817-ysc1wsgr61
- SHA256 c77d8e1d6bf06abeac3f98f1382fc12b2c3c32440970a4f930e7c3634a7adfd5
- MD5 fea6f8a6ce97d924a2e52c3d56b6bc0a
- SHA1 2225d30cc14a2eefa581dbf0c0f6edb77da61162
- SHA512 103be9365259027cc935e6511504a600aaafa2679ec543ff6dc8bbbf2a156c921905c4e71b05fd1bfd0a4bea9c0e28107876d9f5602f1bca482bc8e7cb44b9d2
- TLSH T1A9014622E2A24159D94E4038A526D02C78BD23407E827077D8C59BF680D0DD6D3CECB6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MH3YCL.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-MH3YCL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-MH3YCL.lnk
- Size 1KB
- SHA256 738329a816f94deec24d9399c5f2612ce29c649f86b21de110aa426aba49f13d
- MD5 1a3a9f10f10274a15e68814378cfde60
- SHA1 0b936d57b7ec4f0264e63dc081cbaf7b68b75dd7
- SHA512 87b4eebb2e300dd81ee4a25c8b1d28f4e71de82f6e6886ae766c6d597bec81a113f873adc1d7161b18bb77a579616682ec29e63814dca287c32428c0ab2ba941
- TLSH T1713197002FEC0628F3F39F7798BB572485BEB86A8E21CA2E4140450D1032A15E13AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.