User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:f113f9bbf6abf538634d4c8172c03dad0293da026c0857cc4cea519d96204798
General
- Target f113f9bbf6abf538634d4c8172c03dad0293da026c0857cc4cea519d96204798.zip
- Size 1KB
- Sample260822-hj451ssbnb
- SHA256 c0f6eb3cf79cdb106101b64fad214aeb55581ce34cd033d7a6b1c7c501ec4657
- MD5 811b76a5e555f3b1974bd2b6eb72575e
- SHA1 41d831c2ad92fb12b78332c8d0a7a09e280e4cb8
- SHA512 12e4a44d606658c9e68cf54e5e163df8132674dd98a92111c3d1c7cf3482576e8240dc454d646b6de3724c3d0f5cbdaf9c20ef07ab22fa125bbf91853f139d46
- TLSH T18921B95E57D55E8CDC5E34F89340FFA6040C67A39C248C14C88E3E46AAA4D45BD17226
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D3VRXR.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-D3VRXR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-D3VRXR.lnk
- Size 2KB
- SHA256 8052a9889ac4083ede531505987c7e91126c6ce8ef98a76e91352f1d00e06aa8
- MD5 43f1b053c68f5828bf99d7ef526ac238
- SHA1 37ec3422809d283cf3f4c11fa7578c64fbdc1c8c
- SHA512 0400ca48e474e3416f53526db887a6760d7040d669150a5fd501d56875d6814bec972ef3090c0f5ba825aa1445afae9ac31927819f0bd70b4a9a59594b0ddb27
- TLSH T1234131902AE901E4F2BB9F72DDFA7761447BB9515CB0C98D0C40820D5932B05E57BB72
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.