User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:165b0af852546984027fbe58e83b887abace2506fc9ed41f4ed7bde98fa88388
General
- Target 165b0af852546984027fbe58e83b887abace2506fc9ed41f4ed7bde98fa88388.zip
- Size 814B
- Sample260821-tf3zbsxtdy
- SHA256 82c58aa4496f737180354a56897124d49bb673c6dd8c82a7191c98cd34e46e49
- MD5 fc60706b58659eca286236d53d02a962
- SHA1 fa84cd49c363fd466407bb0fd9a1e852f857cc04
- SHA512 f97d7dce37e19e0c9eaa8228e5fdb2f7ee1d511caf8b389d4565197c2d21c2fa03441870c8187a9cb89852fc0d9cddead7598bdd85fb8aef1637e97f9c024c16
- TLSH T18C0141ED0F03668CE92AD4386A45476513311340480A77AA418C607E8904FFCF9E6D85
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HI9J8C.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-HI9J8C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HI9J8C.lnk
- Size 1KB
- SHA256 434ba56f28d07f21167ea46c28b984cbe8a055b950686ebe8a61deb93a7513f6
- MD5 283559ff038a91574768b5ea18ff3d36
- SHA1 52dcc81c1729ab7b3c28b4e313aad53a66e0d932
- SHA512 889b1c4986204e24601e19e2ee91ce7187434ce896efb7269d693b8cdb7cef6760813f614ddf51a0b1f6e156914ec65a488690fad914b67a27694e69c74565f2
- TLSH T1AB314C503FED0914F3B38F7798BB571489BBB8968D20C71D0141454C5072A15E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.