User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:f08007a709e6568f5a32bf810fa947b9cc371a74e20be9bed5284733887c2315
General
- Target f08007a709e6568f5a32bf810fa947b9cc371a74e20be9bed5284733887c2315.zip
- Size 813B
- Sample260826-wmprdsef34
- SHA256 9417e83372fe3d44fa39e540e9becde9748efc7a3cf768e8386453b778409e14
- MD5 4b66148564249f223121d6bd962419c9
- SHA1 2049f3b0e537306feaf84ba7cc792c1d3c537d7a
- SHA512 4e668c7168abc0cc8801aa0d61f59706d79b96fa098e1c13297fedc9274103ce9ac99008a09aad622368f8917fe6f76c7ea0c34e0b8c5307d2624d9faf242fb7
- TLSH T19B01F1D66BC856E1F9A3453028928D95B71079D45FE95391EF0CFA4004109FB1B6E9B2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G4C6CX.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-G4C6CX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-G4C6CX.lnk
- Size 1KB
- SHA256 dcd6fdd2aa6b5a0d93885c669f81ef5c876559893710685e6316fea055bac11c
- MD5 c86d6795bdfab9d02a1405f17db98aa4
- SHA1 9cd46276046bd0b96f47315c065702425052f0bd
- SHA512 e92c553a21e07cdd359b3faaeab7c412016290850d050c5ba922db79e4c29145caea1df5ec816ae9c58a00774bfce49d05dda4809a3760becc3c8f1ea3f62db6
- TLSH T1C03197003FFC0624F3B38F7389BB972089BBB8558D20CA2E0140450C5432A15E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.