User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7acec65754c6de1cae8b11d4721a58c721c672f6723b239b705f763eb03efeb2
General
- Target 7acec65754c6de1cae8b11d4721a58c721c672f6723b239b705f763eb03efeb2.zip
- Size 804B
- Sample260822-c8rckazgpb
- SHA256 4d9e4da7e26e9a7152b99c24752b444356ffa20351f497516821fcf41bf8541c
- MD5 95ac2cce295983de37d295132eb59ea3
- SHA1 8a29819e7babb2dc417b2d30b59a5133f856d7f7
- SHA512 2736d8c0659be3ab43615233e057a5953a96623c4a41d57b168411d50bc220d450b6c88bc723976ddae95a18d08ceec39f177f44946a76ed902c359d9e005e12
- TLSH T11C0141889B4D1F73E807DBB6DBA26251306A33439801025B5C4B20580E943CC495632D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MY1AJC.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-MY1AJC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-MY1AJC.lnk
- Size 1KB
- SHA256 1be429216a36d2457aad518bde73c548787fe2c1445ea68cee58c3b037481b38
- MD5 1b3ed4d00373c45a9cee86ad6718e5cd
- SHA1 81199b00e693607d795a807404f92671cdb39a90
- SHA512 e79cece83dfd0df3931ac2bf7a0b62b96271168e287c251fea80630c4c48e047c7d38aadd135cc1a3ee3b53638f9d71d99b456d1a6406a73bb9629bd6412a743
- TLSH T1293197003FFD0A24F3B78F7684BB572489BAB8958E20CA2D0041450C1132A15E53BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.