User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3e9af9c6a7559db4d7b3070d1974606ba310a53efc7922d6e8851f77ea8907ee
General
- Target 3e9af9c6a7559db4d7b3070d1974606ba310a53efc7922d6e8851f77ea8907ee.zip
- Size 806B
- Sample260823-eyayyasfmc
- SHA256 bfca13a97690b63e2335edb4309ba98e6c6a5fb5af5fdd5761c7a685a7ad2ffd
- MD5 cd485037a7b622fd7b31819df414fb23
- SHA1 c59914bad4ca03b24f79afb569c827697414e20d
- SHA512 e4e5db2fbe23fe5d9e5160006f4d4aaa3f50c4c5270b2b08b7081454ee38b8f9c951f9793ec8be46fa0f5a8fb642605db8cbcb080f70c6139b5c3e4e70280458
- TLSH T16001416A23632AFEE6C289B0006C5342D473418649562DFF3B6CB3E49D16A82895A4C6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V040L9.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-V040L9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-V040L9.lnk
- Size 1KB
- SHA256 b21548e6d0f49f9bcb634b9329fcfb1b5ad722f8fe589c67abdf4d7dda6df977
- MD5 7e76f2252a6a889215de6221ed8abaaf
- SHA1 b183da27a5aa3b7d130c9f84568c70032ffb6b2f
- SHA512 fa6934c30c790e977070b8a9b7333eb53cb44269281afa8a5db0510ff8315519fee4b5637cae296e34964f513079cc9d089b5731e573fd1214ae84a4e3baa506
- TLSH T1A8317B503FFD0668F3F78F77A4BB572489BBB9568E20C62E0141454C5032A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.