User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c4131f41f7212bc3494fa95ae683bb3a619011179875513e91897349ef6a3325
General
- Target c4131f41f7212bc3494fa95ae683bb3a619011179875513e91897349ef6a3325.zip
- Size 1KB
- Sample260822-dscpxaen5v
- SHA256 37eca68e6095be42bd6976ee2ed09a845191d636a923bf98699329a94df88d3d
- MD5 3315933471a10a751d6c6664c48dff1e
- SHA1 67176a7b4b3c3c2fec6803ee96e4ff584761c30c
- SHA512 5dc3d76daeafc5c7deba7d83c44078931871e9282bb61fc353bba4afc6c794e6629205b21911caddfeecb461eb0e9c3cfeb5aa43f05ec718dc17f9a792263323
- TLSH T11E218740D962BC30CD9E4F7EE305203E5D6B08B86922970DFC76D9C388BC86529B5E50
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-F5GK4G.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-F5GK4G.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-adobe.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-F5GK4G.lnk
- Size 2KB
- SHA256 6873e0e624f379ae65e040cafeb2b658345238d0a4b8be1094e8bd29de6a0ef0
- MD5 8bd37042c3fea4ca716d1b8804daa444
- SHA1 637a7f1bb87ea5c2d84b0037fbf6d4251552994e
- SHA512 0b5246f2d13f629f5164c36e2b14ab90a2ce907c2bcfd8678e051c7d6a7883c88a9aea9ba8b3d9bbbb1ba36a97c9482fcbdfb009110e7ada502e2e7bf779b50e
- TLSH T1F75129943AED50A9F3FB4E72EDFE6394457BB8526DA0C98D0C40C24C1822705D977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.