User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:0b3f0e95f93aabdf61d904d06676ef80c3ba764bf7bc6df5473db393dcdc35c5
General
- Target 0b3f0e95f93aabdf61d904d06676ef80c3ba764bf7bc6df5473db393dcdc35c5.zip
- Size 822B
- Sample260818-mlarea1zcs
- SHA256 5338fa21fa8a8c4a0c5ee1ff4688742ab1d9847f1a601bfa69100fe278500f02
- MD5 ab385716c50a642eecf536263e033224
- SHA1 e74299664225881b4af605917be70913861a4311
- SHA512 98ac2ca08788c3b025d854d7ecd4cbec78680d6284deab3fe2fe48ea3f1a6ed40edd3d197ddda72851fdda160673fa63b532b9cd730307c091e21946cb582618
- TLSH T18501414BC23F89E4FE06B8F0426C5750800894A64BD10AD61C6F6EB0AE6176C6701643
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8Q2EF1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-8Q2EF1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8Q2EF1.lnk
- Size 1KB
- SHA256 4283e92aba64e37716bdc30a328c8916b240ddd40265a8543b03599a022828f1
- MD5 89c9cfa53da2376b6c22278fa2f3d4b4
- SHA1 c778fe1184c44f998d9289f48ea420016ba00b97
- SHA512 bd477b7311a2cd12675661c89454f09161e89c844b19fb2668748bec24c8173c4e4d8ee1ddb9e040363bac94a318bc8f6dc9e25b934ce998e00a5bbc53a8b7db
- TLSH T108319C403FED0624F3B38F7398BB571485BBB8558D20C71E4080454D5022A15E23AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.