User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3d4ae54c909697c7431b07be8d6c609e8e9e12c5fc8a0658791ad7cad51ee5b3
General
- Target 3d4ae54c909697c7431b07be8d6c609e8e9e12c5fc8a0658791ad7cad51ee5b3.zip
- Size 1003B
- Sample260822-chrweaem7x
- SHA256 809cfd745cb3ad952915114820a8fe7f5ae42c69e148333f78289c870ed89ffb
- MD5 9d02edbc0f9d747cf0ae9c05374e3d4b
- SHA1 a54e43079d4d200dad30be5321ab812e1796eae4
- SHA512 c7d1b9027b9da07b0aaef8f8aadab92e300717f0337ffefcfb2e3f1c4cff9d120ef41af9c7be784bfc733ed3681c57dc2a4d2e3dd95cee15f8e9f20fe98c592a
- TLSH T1EF11610216DE3D28E1564D74E28C12E4327D70E974914CEF052AFE0A4AA6EB87BD2426
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZXW7IP.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-ZXW7IP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-ZXW7IP.lnk
- Size 1KB
- SHA256 36bc6a3908e261e04508cc3e72e0dc51cee26fdbde47f095414bc6ee2d83508b
- MD5 7edda6b6a0f04ef6d53c5c1381cf6857
- SHA1 96f564e63c77c60bb4736e233e3a1ce4fa8a2ab1
- SHA512 ac00b65c3641c4f25ea853edd5665b892d4cbe780d9243ee72b7c456ad83864aa8a7eae49f099626b172ba73097ea37f53c13ff83a421c84526cb6e916908acf
- TLSH T1DD418C803AED05E8F3FB8E32A9FE675081BBB9219D61C65D0590C14D0521B05D5B7F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.