User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:29de674c0e87b73a3ed191223ba3ed3ce21de6c7db339bd716cd30be6b49ae60
General
- Target 29de674c0e87b73a3ed191223ba3ed3ce21de6c7db339bd716cd30be6b49ae60.zip
- Size 1KB
- Sample260826-xvc81avdnc
- SHA256 d2f50b05addd79a06e7d78314ad52377b5c67ca0e0093d5096f701acd8641fe5
- MD5 7d1be34f071ac8ed27cccdfba79ec199
- SHA1 cec38359584d13bba7a542e75b8d438056eae23f
- SHA512 9a510846c2daede4edfcffd209de4437318570933c3c144f83904cf67b2fa8e3f4c15621b223ac59beb208623c64b39a57c82ddb32b357b0d8a183752f748722
- TLSH T16621DA23A729BD85D35D1A395F261FC216C1DFD3337381D7B8D898041DC0D4E4A9654E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LNF7US.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-LNF7US.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-adobe.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-LNF7US.lnk
- Size 2KB
- SHA256 c7eee38face17bd884f5e68d04532f674241ef60b6b50f875c133d7b2da68eb5
- MD5 5134a36eb161b048757c121897ade7ac
- SHA1 10ad48edc3683dd02e44a21cb1d51c9407f0a8f5
- SHA512 41c53889ce4502a3ebbdf04e900467f6eafd68e41535cd6f0506b38b9f4fc4bcc1d4955b78938b4694a440db532350b86d44d9d54484c586cca97ede0fcd02bf
- TLSH T18D4135907EEA0198F2BB5F7ADCBEAB50497BBC525D30C54E0840860D4822F01D973B37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.