User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:e59a6baa0182957591d713e71df6c020ca0f0d1e1e27c9959c94d8b6f97aec11
General
- Target e59a6baa0182957591d713e71df6c020ca0f0d1e1e27c9959c94d8b6f97aec11.zip
- Size 1KB
- Sample260823-dzd7basdlg
- SHA256 553a88cfff753869004ba8d475c1e8675545807b083bd24fdcf7309c5649357f
- MD5 3d80f8fd4acc2b19d94c85a97daa8c5c
- SHA1 ca2759bfc8a08feb5ccf1d14c029e5fe19430ee3
- SHA512 787be0ecc4e76854254a008dfccaadaf01db41338377386547b772c3423807a685820f4d0dfff334386765129cfb217d4c969ed52ffa5b7895ce4caacbd2a7ad
- TLSH T1EB2184109187B7DCD905D2314F0053117D7A1B9294AE704389C48CCCB4E4EC6F6CB894
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TWKO44.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-TWKO44.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-TWKO44.lnk
- Size 2KB
- SHA256 18a9dddf7f77af756e82e6ab3d61491f333e77504cf8d6bbe56df9febe85a626
- MD5 171c42b061f0f49e4f696d5fc7588dce
- SHA1 8e7f2cdbe6a068f46f136b1ecaee721f84f9ffa6
- SHA512 a79ce09227c81605648f6fc28ea1a6c8f4e4a69b5491b66d1ffea8dfc2c67bd639c85170f0b3eb31c8334adb5215a9e806370d2e5bcf9ce62f48b5207116dd6b
- TLSH T1115138803AE941D9F2BA8E71ECFF7791587BB9A24D60C64D0950810E0422F01E977B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.