User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:8ce196a1cec249dcdb0d1558ac5405cdd0b033a39f34032a4d9bee052486945b
General
- Target 8ce196a1cec249dcdb0d1558ac5405cdd0b033a39f34032a4d9bee052486945b.zip
- Size 810B
- Sample260818-a41pbstvhv
- SHA256 7160fbb2801f547272ca0a80677fdfb3d4968eb104f0ff69530173146db04e76
- MD5 27eb1dcf9001e70113e62a696e4054f8
- SHA1 9000c4b45eba434e870c4dca8b3c6ae46cdde127
- SHA512 cfbafe3d2532a07f75a205edd6771ea2a220a1b690bee686fd3d0a45c4482124d23ddbb15e1f31861bf976112836a9d1a113251605a97a92ade478a18344bbac
- TLSH T15101754DBFD6231BF2DBE8B6D8248B802544BB460E018F20E3E820344905F670E95C7A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-235IX5.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-235IX5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-235IX5.lnk
- Size 1KB
- SHA256 59366260ea63ab80417c07e86f9ed4c76f49a34e935bae2d4e4a7015a3f85795
- MD5 3ebab88acfa27d4e085dc6696578bc77
- SHA1 6c8a6b3dc44ee53762bfc3442bd15420257a7c9f
- SHA512 5e1acac0009cc031226aeeb81e1895a5aad8bbe56cc4656e9dfda1b253ba64ac8c532fde43c78927b1d2bba5c65a449b4147b3485568a0c840922ed1caef2ed5
- TLSH T1D13197002EEC0624F3F38F7285BB572489BAB8558E20CA2D0040454C1022A15E13AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.