User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:6ede6392516e4af239e185180da4c89f422ec179ae9ec41166d3a5cfcb8831ec
General
- Target 6ede6392516e4af239e185180da4c89f422ec179ae9ec41166d3a5cfcb8831ec.zip
- Size 805B
- Sample260821-q3adrabf65
- SHA256 8db8769b78fe2723baae888bd1e674d5e3bdf904cd2df72ab5a530ab6f68781f
- MD5 3723af19c5d3302006772536f68721bf
- SHA1 6f70b89958abd6a31edfb5bda0e6e92ca32a013b
- SHA512 48f7627a2e824d3c3f16eeb95724ba1210e25956b45a9d7fff1dca9735fb7adb49d84da0d161aaa656f87a356f192f5d3e42bd6851b693016a3786adb34d482a
- TLSH T1260141EE21CC0A16F4094CB0D3AC0B14EE754E8AB90C49020AC1A6F22E2A6F549F7D23
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-17Y6XD.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-17Y6XD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-17Y6XD.lnk
- Size 1KB
- SHA256 ac06c424f93d6874e54816700849cedc4045d8b7ee6d7f09af7d3f003c6e1518
- MD5 42bb39b5cd9ecc49ab06fa2a5fa6c8b4
- SHA1 3022ae1d47ba5c05aa3c3779293fc0c483423855
- SHA512 7c1aee02878f1a77ced9ecf4615ba3d6e0b80d09c172e96f5d25967185f38ba9cdc24f4bebb3dd4b26ef956600f7e9588c091ff40f94a9d3a0b7dbc1de00cf91
- TLSH T18D317B503FED0624F3F38F7798BB572485BBB9968E60CA2E0141454C5032A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.