User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3a7ae0563ee60306758d3bcd859201b84c4eca2eb1c726bc6dffa8cb6ce06950
General
- Target 3a7ae0563ee60306758d3bcd859201b84c4eca2eb1c726bc6dffa8cb6ce06950.zip
- Size 1KB
- Sample260821-tgjbbaxtfw
- SHA256 7e484cf2dc7b7900a272252c9cee54bddec27c16788e7e826b68e10bc491d246
- MD5 3cb49b03c1b934cfc2bccfc5358693d9
- SHA1 d7aa785d8fdb80a1651993797d0ac911d0813a57
- SHA512 f38e8ca05a2029061aed3b29e01f68aaa53c85e7fa50b1d10d1b756f0f511ee244aea91be66a0834064325415e33d7c2bd5af451566a524daf88641960ab2276
- TLSH T14A11B5308E790FE4F146E07AFB00E38684247C913440E47F009950530ACFCCD898F93A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-70B2B2.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-70B2B2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-70B2B2.lnk
- Size 2KB
- SHA256 53bdbaba600cba8f5ce65ba76e1078a981651a40782aed58c2ebb010e3504189
- MD5 803ab9588563319d47c6058712931561
- SHA1 0a712885027ed1af5c700f4db869deef95b93add
- SHA512 ee548b50b2568bf10cd772ba4fc06dd26399d6c75bc85a32e2f751bae7b6cacd36f5d6dfc9128ce51916e27bf3a82e43504ba9eadaa6f08417e891c86d91d053
- TLSH T11D4106502AE901A9F3FA9F36ECBA6750497BBC555E60C68D0C50824D1822B01E977F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.