User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:16fe9073acca7f9e0d63bd62665c829d78182593a0636f05f154f0c2da7bc220
General
- Target 16fe9073acca7f9e0d63bd62665c829d78182593a0636f05f154f0c2da7bc220.zip
- Size 815B
- Sample260822-fbv62aeb78
- SHA256 91e3b24f5c163aae30eba84f2893b21af408038463e4663e98b8ef12c5d27328
- MD5 3864814210c73b9d57eda37f653b4bf1
- SHA1 64176abb10d11ac06045a4508f12919b9205b1d6
- SHA512 6df079121b1262f8880f3b0a3dfce2b0038f8cf0c0e5cb38545d3d11efdfd3265f09cadc03019d7008bb127945ac00e88daef62bbde72d172482496390cbd00a
- TLSH T1630141CBB6032D3BCA07403AA64723941DE99C1224D6B8A4038B4463540B6E89B4EAEA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Z74KF1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Z74KF1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Z74KF1.lnk
- Size 1KB
- SHA256 260ddf6ef2bfe0b66ab4229cd906004263231bf1427353da0b5f450f64ff4769
- MD5 3aef81204e888a800a72ce1bc19712e3
- SHA1 0026cd4ba74dfb6427a0aedef83f41dca961d946
- SHA512 73b2024cd9b9688aa57eb97056b9d0da4cd46e942679ff8ab48a4d3d6173f649a0763ca8ea325cce5ca3c98d078c4db21c7063628735e0a6e3e29399b4bc3a77
- TLSH T1873197403FED0628F3B38E7384BB5B2886BBB8958E20CA2D0081450C5432B15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.