User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:8a37d1ce9e14a8e9be97c079baf90fbf74dde1dc817565b96042e109bd6e1c4f
General
- Target 8a37d1ce9e14a8e9be97c079baf90fbf74dde1dc817565b96042e109bd6e1c4f.zip
- Size 1KB
- Sample260822-c9c7bszgpg
- SHA256 fa8573e27713b34be5cacceba2d2383a294632d3d86d4dd1372692e005604b00
- MD5 84fe6cba998fa500f5256f4ff09d76b3
- SHA1 b7d5a50045fb5f8183a5a04b9627629139e1de92
- SHA512 c0f34f113a564a103f1bf02e3626e2760c983f1d989c617ac303b67b53932311940298bbb18dae5518fc00ab9f36aa90119c0587fd1c92ec2b46733daf241312
- TLSH T1AF219A11C62008E0CD0CD639D6815C5A29BF98CC0DB2EA05D67DA1546B478E6DB47FF9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2XAGUQ.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-2XAGUQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-adobe.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-2XAGUQ.lnk
- Size 2KB
- SHA256 b78db29136ea79db93f6c5b88566df53b5a80ba66cd8ac8d3bfd600ad7cb37d4
- MD5 2c36a255628c9b47b7110cc21508e1a0
- SHA1 2dcc6d8c1a0cae11c309cc9bc397c4fe51d87d18
- SHA512 48f144bf59cdabce9a3671c233274ab2ea443b417ee867a95d34768bdb4033f66bd114c8d562924c82e81e5bfa6ed2273001f0772b030cc3319d8cff50f2fd09
- TLSH T1B9415C906DEA0598F2BBCE76EEFE2740597BFA525DB0C14C4C40824D0422B05D973B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.