User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:e39e1be3244d022cbbcd69e8087ee168ba3b68738b41e667760415639c266b2c
General
- Target e39e1be3244d022cbbcd69e8087ee168ba3b68738b41e667760415639c266b2c.zip
- Size 1KB
- Sample260818-pgdnlss1ft
- SHA256 e610f5af7aab2ee700d4b6d8dc83d58462952dfa24d1de168b912c1dbe7e07f8
- MD5 7fb708adf09bafd632204fa02b0adca7
- SHA1 8a638d33525a4a441e69715017bc8608c0bdf907
- SHA512 f7e55399b66a139456107ddd01d95decaae5286c555f27b38941a08187791a395a7e678bd6337df33b180ea697e9032a16fb05f495fa3ac051143cd663ea12ac
- TLSH T16E114F8B99B4A976DCE11571CB0FB70B9465B2E88CBB988F064978015D72BC1E68CD82
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZO3W4M.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-ZO3W4M.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZO3W4M.lnk
- Size 2KB
- SHA256 c18705ca6e1022298cceb19c91cf4615140600a3061c0f018d5b6f6e7e0b74e5
- MD5 9bccd31140e94616e7234a86d02b0395
- SHA1 53640299da743d3f202a59b3e62edfc35e400f5f
- SHA512 50933f5c879b7a19715887ed6d26b366011f3ed5f56352874fe2b78df80d677e7949fa42da3114fb82647098ef3153c23bfece7f29988557b91a4238fae96eed
- TLSH T1D4416B802AEC01D8F2BB8D33EDFE57844AB77841AD71C65D0850C20C0922B05E577BA6
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.