User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:4d05a26eea1761d0a484678f13e8666beaf6adf6a63dda35b78039f930317c22
General
- Target 4d05a26eea1761d0a484678f13e8666beaf6adf6a63dda35b78039f930317c22.zip
- Size 816B
- Sample260822-w7dvmabk6y
- SHA256 3a1d7ebfb0be9cf04c20e5f58efe18ac6997c47a9069086ceec69da12c76deef
- MD5 7a85099208319559f845867a7f7a4e19
- SHA1 5f9eb835c30d747a6ce8fafe2b8a22b06821b57d
- SHA512 d6343fb5c0cff95afa71cb9d4567c38988b8244c46faf45bd1ca95a6368e4b1a6ee1b17a0110f3ab2b29cec426beca66265b2371fdfd9b4c81b36c6803e3b177
- TLSH T1EF0141611711AA44D666ED36D2062CE33BEB0DF06F466F88427990204D2FBD1964BB29
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IXINB7.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-IXINB7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IXINB7.lnk
- Size 1KB
- SHA256 d037f290d607b61c71d5b47ee98536ce835683a1a6ff63527d8537542637d4d3
- MD5 ce8e7d7b8e48d987106f7fac606bd8ad
- SHA1 b5b50644ccbf80868ad43f497d5d0eb2b57f613d
- SHA512 143b7219f1cf24098fdd4e76623ef8e4ac5c6f89afabf4f1f0055ac9f5abfbcefbaf6ccc7bbe0f060fd476e34fc25a36c00fae0f45a975107d029fd604ba6532
- TLSH T1F73197002FFD0628F3B38F7384BB572489BAB8998D20CA2E0140454D1072A15E53BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.