User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:e25dc752b3805797b1c04d1737f0b500fd07ceeaa623df812c1762a236041ccf
General
- Target e25dc752b3805797b1c04d1737f0b500fd07ceeaa623df812c1762a236041ccf.zip
- Size 814B
- Sample260817-yslyssgr71
- SHA256 98459359c0a43d09fcf07dc6966c6ac785e1630b2cef56337b41406edce5a83a
- MD5 1bc29521bbe2da4dc73f9da28d853106
- SHA1 759359e9d73862fd1b46ad860423b585044be7d1
- SHA512 1806677c21fb35943b0590a5660d869d8d010e414e9ae358e80f2e7ca70baf8b11fb4d277d054ab4ed442197058a5d0a5af1c71332aff8cbf931d0bc5d40bb51
- TLSH T1D30181125A7CC943FA1F65360BF71E110CA102B7524610B3800D43845A23FE08FABD75
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4M6RWO.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-4M6RWO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4M6RWO.lnk
- Size 1KB
- SHA256 f3c78f290c7878af5037002e5eec9ee34c614beda2567d4bfd5459fa7b115f94
- MD5 c24302b7eca2b569c9cd02b9f0692bfa
- SHA1 b317ecef94a8903632a3be32d9f1711c2211daa5
- SHA512 ce045f73f0d06af3e8bcb7c62c8aeba82b473f25249ca4f6e3f1077cd09cfa9a7b0bd356dd61af4070e8e9f5a78f17dc5b4c66f3bf1f93ae3f4a93552a565433
- TLSH T1CE3197503FFC0624F3B79E7788BB572485BBB8968D21CA2E0180450C1032A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.