User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:eb00a7f8fb8c121253e962060841c16ec56ae182673702eebc2dff7bc32b9a20
General
- Target eb00a7f8fb8c121253e962060841c16ec56ae182673702eebc2dff7bc32b9a20.zip
- Size 813B
- Sample260822-beeagat1bz
- SHA256 2ea96fc1809bf80c47ec0fa1f1900fc2d0aaa8cd00e82f205f26be20c308a8a4
- MD5 fcdd653b8b5bbe6098451796b94626d0
- SHA1 de45114abd8cc49b131a9c27191e2e3b61259b82
- SHA512 49c0869af05b6a61ff7b23dc801698b603d8f1bf0e07380a6be18b72fc0852d1367caef17fd77d4ec5dd5c960d482f126f00bf364899e235f8cde1c331fb2004
- TLSH T1DB0175EF321BDB7CF703B07996BA0A142F397162700A07A7255DC1358476EA413CB849
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BYXWGC.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-BYXWGC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BYXWGC.lnk
- Size 1KB
- SHA256 ca02db9726a887915fee15ab9140e3c2bad59a676823a99a19e4c03ccbba9e33
- MD5 132d0105a324bcaf6b2c9893fd5c504b
- SHA1 0b95552c54bba27de99713d3a588a5e417f1377e
- SHA512 676dcff240ea6e0baf800b567be25a730cdbd40d87d869b10726a2f1cbff67335d4c64dd11b7aeaeb37110de32c5cf6c66569e98d85e5c3e4589ec77c47e1fbd
- TLSH T1D83197003FED0A24F3F38E7788BB572089FBB8A58E20C62D0040460C5072A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.