User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:4cbf8ba4ca388cc9fccc832247cb633a0357094fab2dc02cbb8f7e5bfcd6a54f
General
- Target 4cbf8ba4ca388cc9fccc832247cb633a0357094fab2dc02cbb8f7e5bfcd6a54f.zip
- Size 1KB
- Sample260822-fd7mvavygt
- SHA256 f2f37105534712a5d0044b7a75714327c8217bd366f3982d58da244b285bad07
- MD5 758a48e34c8039dc3af2c278c451216b
- SHA1 2a7cb633a7f5a68e722c52599b7146963ad927f8
- SHA512 ef58a6f8e6274efd1fb819000eef60602e50fa0f47aa10c44dc0a008d08bb4ed0d6c1728e97fa487bfdf191d6004920af7d71e542ca0048c284f3a3cfbd2fcb2
- TLSH T1DF11B50774CCCF8FC37E92F23515635CF4616B7D2821CB6A1647185A273AC8D4799E91
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GHE06G.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-GHE06G.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-GHE06G.lnk
- Size 2KB
- SHA256 e4a7e33de8f42405cf0b7e6ab0fcd868d4c3c3ee1c6db6089e4eaac1cae3c0ff
- MD5 d90e57ae0da3889ea153871b0d222d8d
- SHA1 2fc4f6d5ebc5f2d5e097881d1fb47378c5cbbbc4
- SHA512 26b0d455f684a3a0f0046a4f8e0412b31f687e1b7d0d84499ed80f0524faf4108913648ce1f6e508e3a6998641abef5c5d09ab357cb5496cbe6bfe4c9f24f0cb
- TLSH T13A4145403AED01E4F2FF9E32ECFE6B12497BB9524DA1C68D0840810C0822B00D8B2B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.