User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:458d2a4b0c8bb47a3bcfa6eb2b21fef96591eef44547a87118c90c5782e255a7
General
- Target 458d2a4b0c8bb47a3bcfa6eb2b21fef96591eef44547a87118c90c5782e255a7.zip
- Size 1KB
- Sample260826-xwtmdassds
- SHA256 c3da55cf325c89afd15bdf91951db5010fb09b70d36999783dd85242c62ecf1b
- MD5 4dd4219fb4c9c63350ceb345ba7564cc
- SHA1 02cec7c903b6ac045f980f98c2c21419791798bd
- SHA512 60ac90b5aa1647968ae438116d186c1399197a576364717acdfc184e2420e417e1aa0fb9f12ecc21920a6eecd4368103b8e4ea22faf4a6367657e533fc05acf9
- TLSH T1CA11B934543C0D9CD126847FBF4956CE2ACAAE9D1032AEC34968E4460A37C916E17E08
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Z0OLQ4.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Z0OLQ4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-adobe.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-Z0OLQ4.lnk
- Size 2KB
- SHA256 7d2c454cc98ef81674da32d89eeddcf3a24c84c15626c4e43a4e740f8ba68447
- MD5 762cf928b1fd4f7980c103752d384195
- SHA1 7b8d2bfe69384d23df00c8d1adbb193c57abe81d
- SHA512 e49f879634fd684f684c68445b11e5d30d672ce95ffa151802f9afb0a68ef6007d11efc6f8da71725257ce2d5d6937fb8ce5191834c81ec22b258490681d172c
- TLSH T1A64145802AF905E8F2BB8E76DDBA7395487BB9A15D70C58D4840C24D1832B06E973F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.