User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:6a2dec4b0ba9fcfb1aec34608477e6ed1b1c1424079d32e513b0f1b9f4af09a3
General
- Target 6a2dec4b0ba9fcfb1aec34608477e6ed1b1c1424079d32e513b0f1b9f4af09a3.zip
- Size 811B
- Sample260823-g2n13sep3y
- SHA256 991d16d849cdd53251ccce7a7340802d84ed76ea5ed3ea20a6c1bfc501a26913
- MD5 967a8dda3a31c3dff1937ed5b2f8e52d
- SHA1 1afd2783a8dc78d7cc9a1623f80d2e3f7fbfa24b
- SHA512 ee3ef7527e211242a1251f9c6ed5209244c9978c6c6af3b6e4fbdd9d74c6d95566678eeee08599512d1d2f9519d017f3df8075d041409a2dd498db3eede7216f
- TLSH T10A017A9B1609B010F606CE739B3644549CC657DD1527144A47799B5398D3DDC0FBBC01
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9MHCPF.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-9MHCPF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9MHCPF.lnk
- Size 1KB
- SHA256 d6e3ae6f1897900ebf185f7878bbdd6aa89f227af479c3d592fdb1ab70f85443
- MD5 ca140c023b5e83039a5315ca770bae7b
- SHA1 e01112a77cf91276a14fc3456d0ec129064ec2c2
- SHA512 d144b27dd6afc7f154617a4911eccdc5bd6e0cd12e08be83c9a93e8cfdcc0fdbf677746578f38e98298f446d01bae74681a95af1074747ff4f42f6b096aa7bda
- TLSH T1C63147503FFD0624F3F78EB694BB572489BAB9A58D20CA2D0141454C5022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.