User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:aadf556cdf303bc6f761047c0fa08f9fb715e58ca1beaa36cb5b7b0262c147a3
General
- Target aadf556cdf303bc6f761047c0fa08f9fb715e58ca1beaa36cb5b7b0262c147a3.zip
- Size 1KB
- Sample260822-akzmxstyb1
- SHA256 e242bc89e1de804cb3aa311f58fc01dd2efd9b842f41663c6e9166d005b1921d
- MD5 f9f75759163acad9f83a15a47ea5e45f
- SHA1 a64d635c03a36a8b1aab9e62c22dab9edf830194
- SHA512 01d8ce34d79e5b31f621b5a28fbd0d3559ad13c25354069c2137a9f7ce8d7f4005361e076ef4fdee541ff534574a678fe47b31bd921629ae06381248d93f97d4
- TLSH T1CA11B9D615C17DC7EF90B6323D0E4B04F1016F121B80660B129A4D6377A54F611FF1C1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FDGNO4.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-FDGNO4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-FDGNO4.lnk
- Size 2KB
- SHA256 ec8d9ba4e987240ca4a2c38127c571f23bc0eeff241a4614e24f0476dec78b30
- MD5 b154bb7aa8fec3c8e7b36f7d48f11bda
- SHA1 89e9c7ef1bb871dff3a12740297d2190948df798
- SHA512 c3e2738abceb05d5b1a4416397421f65742f5771a37b595e79c69af91f92ad5a1ad2794e728b0918d09beadcdb40c8fbe97686d2597f496122f2ef4e15b7273d
- TLSH T17F4136807AFD00D5F2FB8E37DCFA6751897BB8565CA4C68E0A00824D1426F05E97BB67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.