User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:feb15642d5cb4901972d6af983b2508e549da95d01b681893f9f0b492c3b1402
General
- Target feb15642d5cb4901972d6af983b2508e549da95d01b681893f9f0b492c3b1402.zip
- Size 817B
- Sample260818-elefladq51
- SHA256 9589476828802df340b39b42e4774aca93cae2037856d07d3481cdc0061e8cad
- MD5 9fbfd831f524946412c0b59d5ee73751
- SHA1 f8d19e004163d880a397274b8aa7326b133a95c2
- SHA512 f38e80d3ec1799e1b2d0794c8a3c47316e29d27b14c4ed664b13b8b8adb56803f24eb0e415859436b6b219d3ba0dd591a696e064e63315f4a7c66307af7a04be
- TLSH T14101F14D545598D3E1BA4E7B6C1F91661312DDD615D1FE09C4C7742A0D42E560FC2082
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DQKB94.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DQKB94.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DQKB94.lnk
- Size 1KB
- SHA256 765697e11532f55125a41d105641756b949e0340cd5b695ae4ab6da58e19ad75
- MD5 c351831072a361f03c582e322a4db430
- SHA1 f4ecbb76f69258eaaa9ca24139e18f36c0d7587d
- SHA512 6ec5b27238b0ba530949ed97b8d70c551816d1ff54ff58585e25b70dbca674591d010006185231f3673a0e87c79b84a5b97e6a608c4bb71aaae8196e73f60484
- TLSH T10031CB503FEE0628F3F38F7785BB572089BBB8998D20CA2D0140450C1033A15E53AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.