User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a8db3aa894a0678ad18d32a80a4e0c2975ed45e2f0edefd013b515ef47f42a5c
General
- Target a8db3aa894a0678ad18d32a80a4e0c2975ed45e2f0edefd013b515ef47f42a5c.zip
- Size 1KB
- Sample260823-e9fnkaxwfx
- SHA256 2ae070c9b6f5238cbe0a14a744fe0fd2124ff676976ca5e5215d61a53a5b3f3a
- MD5 d6072fb84d43cc79a0a22f6072335714
- SHA1 fb7616b86d43be75f01ed294319ca01fd462d087
- SHA512 75b7a0da88188eff9c35c6f87128e60aba5b107934ea6e1669f58e900509760d95e37503ac1ec8ff9c95377f2c1c346ceafd16b23ddfcc3287347f497687b2be
- TLSH T128218688076A2C2ECA750EB5189969043454BEEFF961F7D22FE77401C08AE811689905
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KVPEI0.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-KVPEI0.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-KVPEI0.lnk
- Size 2KB
- SHA256 8c20f5e62385ec79ca2b8b28579dae61efe9f5ff9ac20228f6583e3cd5bb1952
- MD5 1a27ef7e1b745c288b3fbb3bab478cc4
- SHA1 bce8328faf8085af881daf4176039c682aa3fbab
- SHA512 01f58766e88eeb273350e6ed0233212bdc37cebadbb88079105f97d12d15727439e411e5b3a44d02162c357f2ebc4719bb31b8bb8ef7a5dc2329bd7839b04920
- TLSH T1D74174502AEE49D8F2FB8E76DDBE5B10887BB8A05DB4C68E0850814D1822B05D977B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.