User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:63b06fd48f6bacffaa6aa7536cfb403a09b7e58709612378376f67103bdf9f53
General
- Target 63b06fd48f6bacffaa6aa7536cfb403a09b7e58709612378376f67103bdf9f53.zip
- Size 1KB
- Sample260822-j8rfwssfke
- SHA256 298d848f14257d2d8604daa8b9f60f3d53b960773d5dec668e031feb95beb902
- MD5 3996e5405ebf3de798dde5a37cda7229
- SHA1 30517ecf43cae95697f84174ad44a805bf1536d8
- SHA512 5e94cac6e04bae71493467c2e1b5068978d433a38850b6f6d41fdcacbfa723c0e04e3eabad897de6151461cadb7e53ad2f0717fcf63e5ee46b32c0f76bb5a77f
- TLSH T15021630A36822CE9E06366F55437FE16712D5814E240D78B302A1B9A891BADE5E50948
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KJUYSF.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-KJUYSF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-KJUYSF.lnk
- Size 2KB
- SHA256 08bf1d2b5ef285b886625f67ad07240a2773ed7e463750246cbf7fd882dbb5c6
- MD5 40ae13022afa8bd8d35a32d0124060be
- SHA1 ecc3478a8dc87c8800d3e1eea1492a13fe81fa8e
- SHA512 8c0787d16d1740224a65c0e13f828dcb36442c92e1fda494fc14220bedd7f40f839a775018b66450d8f649f43ceb79bd35b80d1725c5ccbf3bf255b96ac39bdc
- TLSH T1F14135D42AF945D8F2FB5F36EDBE3B91497BF9115C20C68D0840824E0422B05D87BB63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.