Overview

overview

10

Static

static

1

DOC-YCOCM9.lnk

windows10-2004-x64

10

DOC-YCOCM9.lnk

windows11-ltsc_2024-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:8148cee8d77581e963b95d66270c62f9f24c114b0a84526daf7e25e1e5d03b48

Sharing

Copy URL Twitter E-mail

General

  • Target
    8148cee8d77581e963b95d66270c62f9f24c114b0a84526daf7e25e1e5d03b48.zip
  • Size 816B
  • Sample260823-e6qdlaxwet
  • SHA256 d053b78f0156be86284739dc00b5ae872167d12c4706d19b531e2964b2188685
  • MD5 SHA1 SHA512 TLSH
Score
10/10
execution

Malware Config

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB

Targets

    • Target
      DOC-YCOCM9.lnk
    • Size 1KB
    • SHA256 ba5fd93ce9defe3279bfadd0a7c9d4076f6ef5d47f1b22e5646917efc1f4c224
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks