User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7bdc95ccb0cb1477fb9f652764c66fc8d9136e468d835d54137becd8bd0b7bfa
General
- Target 7bdc95ccb0cb1477fb9f652764c66fc8d9136e468d835d54137becd8bd0b7bfa.zip
- Size 1KB
- Sample260818-e5va6aej51
- SHA256 9dea9ba3caee4ce73a0e6383fc4099a57a844966b17750bd3df07d6374ff6168
- MD5 781a5dc08165559eeb723edfbdc47d3c
- SHA1 dd2009a579b621ff2a612c80034d6a58167e98b6
- SHA512 39c32d2127d270a99acbd7e64c3741109c4dda397aa8e66d7ae4a448d65bbc708d9ab7bf48f51c70ee5b75c830a7d5a1dbbe5ca7bc54a26fdca074de9501f5ec
- TLSH T1B011B9DFCEE95C27FE95C4359E9CC262FE085482256579739AC3671024770883794400
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5EPAID.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-5EPAID.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5EPAID.lnk
- Size 2KB
- SHA256 eb11a4455c66d2735d6a9a89d33797557300a97b96c632a4d9612c64ab20a45c
- MD5 3b210082b48a72606770a9e88248ba2f
- SHA1 5bb21f46d4b8dab242f112dfafb0fa74cabb268a
- SHA512 a8181871a52d759ee58e075b01d07dca421ee5f8058a4dee89ab9a5a6a485fff644de78d9e74aedfcef62a37cc7f570e3b0ca02cf4df10b7eae97eed10f39fc5
- TLSH T15A4148543EED05D8F3FB8E72ECFA1711497BB8855C21C65D0851820E2822B45E9B3B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.