User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:31d30ed70ec92df249bd24f7fc63f037b88c49348ead2c857373dce549352557
General
- Target 31d30ed70ec92df249bd24f7fc63f037b88c49348ead2c857373dce549352557.zip
- Size 814B
- Sample260818-djlapavdma
- SHA256 cd4db4bf1e0871003d8c52d8b4d5f8244312dee9d9cab60b2e1cdc47d006e702
- MD5 0a7ffd60a264676b680e5cea412a59d9
- SHA1 e4bcde3433af8652d23dc9e1d4848db522d32ad5
- SHA512 273a2688fad95ef0269ab319dda79f85521631fd1e1edd2de47a55c789be20e7a2936f575b5f639d96418102b126d93695a1fd8badc91fc36d5bfb1231d3d8d1
- TLSH T1F501758A385E489FCF71CA7156737C2B671510A62F1872E7AF8E900909F1A09FAE1815
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZT43QM.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-ZT43QM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZT43QM.lnk
- Size 1KB
- SHA256 46c72d3cdbc7570afd0dc378589f17e96d5cbd6b310cfdb11c180f48e419355f
- MD5 cb0a49d50e4023d069295a5c69d73bbd
- SHA1 fba0066a2ce731defe05a21daf84dc2b1b25e376
- SHA512 3ed336d71b2552050b17b1b5f9cc39f1eaacb7dbee284179a90378399f368169050a7c134c42b2efc2f9a92107ad28051203b524e42218accbf17c5070b51315
- TLSH T1F331CB103FEC0A28F3F38F7384BB5B2485BFB8A68D20CA2E0040450C1072A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.