User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:deb722f7b2f66aee00b8d1aa4b967a51b5bfbec08e246171ce04c453e58d68e2
General
- Target deb722f7b2f66aee00b8d1aa4b967a51b5bfbec08e246171ce04c453e58d68e2.zip
- Size 819B
- Sample260822-kpgb9afq5x
- SHA256 6712be46ff7a8594d17fab4ea6986bfc4f6fd5037046020dccac08465c01a744
- MD5 2eb43e984ab0b3e792021d24b832957b
- SHA1 a508c1b3716b380fffe589989dca63fa160fcd88
- SHA512 0101f00f02a8206eb66ea065a86d5446d81995995979f93e8ed1a76d29a3a5e74c021d5b4c991070c51f1e9770e4b3e7dfd890e5b7cfb80e1a3f3d4378595c53
- TLSH T14201819431CB0B93E84E3832851AA1080EBAAAE53952CAA080386D9304AF0C5C1B270E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V84E0N.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-V84E0N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-V84E0N.lnk
- Size 1KB
- SHA256 47fa916fc4890cfb301d56942b95040a216c0324d1922b74af1b9e556c2a9b52
- MD5 d7cf48dd08baa2e8decd4737db04e89e
- SHA1 eff2aa293ed3d8ae52c0b55a8826b427ce75b469
- SHA512 32984285c44390d5037a2fe170996a72c7aa87a342a3773bc092b60630496cce2a66edfc3d4f3c9c626decfee76b10914ca278c1c0e228d35651e11836a88e60
- TLSH T1973197407EED0628F3B38E7398BB5B2489BBB9558D20C72E0040464C9133A15E53BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.