User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:444ff0f09fe41a75b8adb9f1c6d85e199753955bf89d19ea99942555b860bdba
General
- Target 444ff0f09fe41a75b8adb9f1c6d85e199753955bf89d19ea99942555b860bdba.zip
- Size 1KB
- Sample260827-3fkx7abc64
- SHA256 1eff4f8218c9ca048dd123ba6b6c3748889a786f05ccddae2f86e80ce3029b17
- MD5 0512e217d4bfcfd400b4045379089e82
- SHA1 fa87252225e0e5481447ec11d0cc493a02d2a412
- SHA512 643ea08adc507e146645ff3b67d05816718df42e6f1609507836b7e91fc450a287d03ac753e7860fb50b86bc8335177d24d4b918c3fe6da2826a3095debe2798
- TLSH T1252196D0FDF35A8ADFBE48FCB7020642A00E65816E009F76045514223DD1D60AD459E0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1Z6W8S.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-1Z6W8S.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1Z6W8S.lnk
- Size 2KB
- SHA256 85ee17a616583d9b84924fb21746c2405df9619fb0ade619dbd43d4b1f973c85
- MD5 c4d71af9e140916a96c05b76d84862c9
- SHA1 52a457bab8c9096201666d574574b99739b01d41
- SHA512 4cb23f33082af600ba4d9bf97c725ea9a5b89f05dc845527b049209a44a2fbd373b405e3b20d70905336e4359440fbe35807a234ce7fa182ff00aa92b367e65b
- TLSH T1C34179903AEE00E8F3BB8E32EEFE37544A7BB6555DB0C59D4850814D0812B05E9B3B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.