User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:64d211f4ff8927e948cb34886aad4a638c2837962f35e0e8b69e86164b432e72
General
- Target 64d211f4ff8927e948cb34886aad4a638c2837962f35e0e8b69e86164b432e72.zip
- Size 812B
- Sample260821-xe665szvbz
- SHA256 744761f94e98f78de0645793f967d903d9da28d16b8f86d7fc4980cb33efec11
- MD5 c9eb1b038ec5c1ea96bfd441a7a765d3
- SHA1 710fa479776ef48ea366224a8971018864670b12
- SHA512 7a4b5cd180896a1d873349e6b0c3b93963204cb5df40445ffa5d8b65844c871ff6a193b13f6c275ac5bc44727c3da7bfdae17bab598e0af0d6d55fb072123cd8
- TLSH T157011E9F17C8AA89C593C23C09B14A0189F654DE18518A2A164A8FD82BD2AE64B872B1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X7VE1J.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-X7VE1J.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-X7VE1J.lnk
- Size 1KB
- SHA256 378acb5bd94274cb6cb408f41da51d52cee9d8fb4191781b8e4df324c9020a09
- MD5 a91d814306fafde29339b99c695a2a3d
- SHA1 85f6fab7632ec54faf9c4dcc095ee5c430b49108
- SHA512 67db1a0a607fec1c1c7c38ace671ed8c26ba226864784d3c2082cacf3810c3255cd5d2ed99f7561640e07530e5128393ee7a63dfa0a917de00644a11bfcc0f6d
- TLSH T1B0317B503FEE0624F3F38F7798BB572485BBB9568D24CA2E0141454C5032A15E17BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.