User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b80d17bbcb4e497107c6728cd63851839ebb6f6623d06bd79453de17581c729f
General
- Target b80d17bbcb4e497107c6728cd63851839ebb6f6623d06bd79453de17581c729f.zip
- Size 814B
- Sample260822-hbbthafm2z
- SHA256 4729478773bbc6a774c98c7a09b8e4bee4bd63e2a054d0f3f44bc982ee8f5f76
- MD5 bc41983d3fb7bb52dc8af89e1c10e6bf
- SHA1 41d7bef6d053353ea7511bf922469c641a8752e3
- SHA512 bb2bcd904ce573e7e71eb68615134f886fdff644f4eb415a32b39459bafd11e98194492c14f36863f0b7bbc44d22258179ebbeb473d5a70db88732c89e1e4fda
- TLSH T187014691111A2D7BFF768F79072F22943A320CC72AC0CB4555305905488DDD5ED81705
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2HJ32W.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-2HJ32W.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2HJ32W.lnk
- Size 1KB
- SHA256 5de4a7907e4501b0c8566dc49a69b0a59eb200d9b62025f65b467b369cfa3198
- MD5 c7e133ee649cb34780a1f5f6ad173e38
- SHA1 56c968af0e08410507c8b4019f12222aa702829a
- SHA512 8036e21dfa4c183d5a5ae6992f7074186808ee97d86034dc2412b0a513d9e62af292e3a27ec27ee6b19058938b55e266bdbc7a88716aed8bc4d117c8dedad0f6
- TLSH T1573147502FED0664F3B38FB798BB572485BAB8A58E20CA2E4141454C5032A15E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.