User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c41e100269980b25a44d5f1edf30a022559c63aeeaf7c4233655624463733533
General
- Target c41e100269980b25a44d5f1edf30a022559c63aeeaf7c4233655624463733533.zip
- Size 1KB
- Sample260821-x3d59sbm2z
- SHA256 2c49b48a7a5a955199c34a3c5529f28653815744289c234ec00bfc805be15e5c
- MD5 9a2c3e810026d144a8ff407c256769f8
- SHA1 fc8c55637e48ac417eecf4a912ad715d6e80217f
- SHA512 eb93ad6fc0db3097290d707c64312dc76b706ea8c20549000ba839ca2ed99c54ae2baf5579dc952ccb43545bfd42fb8a8873b32dd1ec4023125a18336e996c55
- TLSH T14C21B9700B12BDB8F92F1935431E37020D465291FFE41127992565BC2E13EF5527BD89
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6TGOYC.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-6TGOYC.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6TGOYC.lnk
- Size 2KB
- SHA256 899168e568c8f7f0eb6f9337ed1c3e3332126c61c0a4a853b24b3db6a55d0ff3
- MD5 b7cda8efa35b9430fb7bbe5a63a6031e
- SHA1 7377128082643f27241a67e8082d7d444af3ea4d
- SHA512 a3347130c9fa8868557ed95857018e30a3a10994b2974740ec96195269cf427eefea300a747f59ab0372a8b919d61552dbb4862b3fc2f0d9ef1212337709df22
- TLSH T1E341F3902AEE00D8F2BF8E76ECFB2B11597FB8565CA4C55D0850C20E5922F06D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.