User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a700d0828ef1ec5c06485b92f912ff40de4ba4cb7f79ae41630457992f720b2a
General
- Target a700d0828ef1ec5c06485b92f912ff40de4ba4cb7f79ae41630457992f720b2a.zip
- Size 791B
- Sample260821-y2lpdsdb96
- SHA256 b026e3ac17562f135a43673cd8d4a1384e4af0338a7d81351558171597175d11
- MD5 cf8482c5d6080f606b3e66d785a61cfe
- SHA1 cd51ccf640e9f3e4a7814365e64fd49021f70aa6
- SHA512 66adea93541197fe93f76c7b60d95580a14094118640985676009744dbedb95292471ab57f7a083c5c1c10fc462c611818b1b5da8fc66e29c3da4529d3788cfb
- TLSH T11401756E95BE6C8BF08B4AB572004A1422E50C4131CF120D869A1C054F4D6AC21B9B30
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G7CZR6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-G7CZR6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdfiler.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-G7CZR6.lnk
- Size 1KB
- SHA256 d9b0b1bb4d556bc2c14bda596dd1911d06cd94e732537cf59592a1e16b1b9a45
- MD5 e9c60249357eb2a6d414d40f1c958ef1
- SHA1 4f9e3a0c48014359cc5b17980989da22813ebc43
- SHA512 ac036fc31f33c5f1e4046937ebc4e909a417ec1017b4b2d8f0e70f0face4dd3ff27dfaf1484fe4ddd030ed7f307f3fa7753cf43e78b92df266d5e26a554777dd
- TLSH T1513147403FEA0664F3F78EB298BB5B1089BFF9658D14CA1D4180458D1032A15E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.