User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a09d45deb4c003d0989edbc52aa5e97c474ae8307629384e039e28935ab7acdd
General
- Target a09d45deb4c003d0989edbc52aa5e97c474ae8307629384e039e28935ab7acdd.zip
- Size 1KB
- Sample260823-g4mk2atdqe
- SHA256 c4c7360c7100d9616e4b557686fc8e70b56e83e035a04aaad35801a1c0ef7f15
- MD5 8d4072a3592590683b5615428830a518
- SHA1 5f26371e77681136676cf79dd1e8d08f406f01fd
- SHA512 5ffe215b762e0cac595be65a15a89516316e085b749f64fe474249f34dd7926312b13ec161d124fcf8715b2e51ef7406d75180d417c289a378ba8e11044da16e
- TLSH T1B111B93D77F78872C8461CB418DC100921992DF9565CE1D71E155EC80354BCB5DB54D9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WJ5BN6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-WJ5BN6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WJ5BN6.lnk
- Size 2KB
- SHA256 0aca16d4287a99eed15fafdeb8ec2509c001445897dc570a1622562ec1bfc901
- MD5 66cb36d96637d05f33821fd5a0e03b55
- SHA1 39d18f54412fb4748c4e8b92ba4276b0284077b7
- SHA512 ddf2b5feb0e577457ad645d973d5fb872fcde92e6a2aef93c1a17aea1d8ddd800af177fb7bbe34732c63f5008dfb459db992c690d41aa709ed29fc4a6eedb2ee
- TLSH T1864167402EEA0598F3F78E32EDBF276185B7F8A16E20C65E0551424C1923B05E577F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.