User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:951f0e78b6518c68729c258f21b5780e9e1875455fb2df2cee02eeece2e89fa2
General
- Target 951f0e78b6518c68729c258f21b5780e9e1875455fb2df2cee02eeece2e89fa2.zip
- Size 800B
- Sample260821-snkx2ssdrf
- SHA256 69583e000c1c18af4469e6cf10f9d088c57ce9ca23f9ad8770586052cc73f23e
- MD5 f5deca2b7bc0b98217224b6a050d5291
- SHA1 c8f1d7192a5cc032906a9d66ca2fab45c4de8be2
- SHA512 a5485aafd634db6196a693a13479b3de8a7d9fcdab96c2f1aef5a9774e8e616a2e63869d4371cde4912085e35342648db031f1ef9631ef16c7011179405f373c
- TLSH T1910175848E744F01E721C5F4A8B2B99AE7AD52C1760CFA4125DB0E7040E00DF4B9378D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0DJ3I1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-0DJ3I1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-0DJ3I1.lnk
- Size 1KB
- SHA256 2161a6d9a44daf707278e47e458543db164a12f1f638e492d9b08df493a91ce5
- MD5 002cf1155f9239027ca9a57d497ba3c2
- SHA1 0e047cdc5a357369b645c9de8140b2ae9b988af0
- SHA512 6ecebab72f34fca757067ae554d96055446d4fc3467a1bd4ad385089c2de2cfd12622776d5c0bfddba214e587e0dbfe8c9c04c60d7b104f3721e508a60a1d481
- TLSH T1E031CB103FFD0614F3F38E7398BB57108DBBB9568E20C61D0140464D5032A05E93AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.