User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:2f0787d54966eb69d53137801bfdc7774a882680296a2e7fd8837cb6b4484b5a
General
- Target 2f0787d54966eb69d53137801bfdc7774a882680296a2e7fd8837cb6b4484b5a.zip
- Size 1KB
- Sample260823-efk17asejc
- SHA256 70be7f20b92b4556853e4e547e412f5f69e7a7f13e72fa19bc7b51f5a1912da5
- MD5 a6754d7705cd651f568668a3168666d2
- SHA1 fcdd495dbc9d91c21f92fbdb67d824e7831fdf03
- SHA512 fb0e7a9466efffe176b14b46c6a307350ff0140e8b9d97d2e33bb7404efaff331ce648e8e5774088cbc274ee22206f1b2a0b81ac195959bd87866eafd40ae8df
- TLSH T13C216736B6D56787F12AF5337F41B6B173CD31542E725A43C1014C1435EE88645AEF98
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QQ4TC6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-QQ4TC6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QQ4TC6.lnk
- Size 2KB
- SHA256 ceccc717b40dcb5a4abf6959f3a1c046db6503a1f61fbb9d35523e3d648640dd
- MD5 caa06fd6ee28754422d556566cc77747
- SHA1 5fba9ea903ccdf85b08d7eabd61be26a14ca5f88
- SHA512 486e4793d4d6d82e0db6db675582aece1b098a6a6f23dc27d14ab9f8a183c852c75c120e6b3602e7914b5b1e874ec77c25ac9da689d8a1574e1ce0b7e31f09b6
- TLSH T106417D903AEE0098F2FE8F32FDBA676189BBB9625C34C66D4540C20D1832715D577B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.