User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:9b19daef856a58de66c1685a53589ce29337af081513d1d0958fa2695ccf687a
General
- Target 9b19daef856a58de66c1685a53589ce29337af081513d1d0958fa2695ccf687a.zip
- Size 1KB
- Sample260827-bktbksycpd
- SHA256 9aa8d061b79a2fcd2bd83a308ca2d3c3c428be652f83498f52faa806e70b5105
- MD5 f97bdd9eb60559b9e2849f4f82e63700
- SHA1 efe2c1d2cc733070934fe3d1e89f95273e02d414
- SHA512 f6635bcdb622b75321de91eaab26ac2e4d75fdf0996ecd5bff6e54f74a2cd5409de5da90236303c43e872b2c4c288def4738c3de9715a0cc79838c16eb53720f
- TLSH T171210DD818BC5CC1F4DA0836D5835E6E323053E40391514E1BE8B47F65F46D046D6F4D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IX2HRB.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-IX2HRB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IX2HRB.lnk
- Size 2KB
- SHA256 8cf1496937330f670067c45ab8991022369b597f9b5ff7c1edf9f44e3d179c87
- MD5 fd3243ec9d8989b5a60d0fb853af844b
- SHA1 1ca95a238ba6d3cde1adb5e27cf42be0430e4bf7
- SHA512 f357132fb295a6aec7fc100d72df08c64d9d001269d832ee958d140a8b090da38fb75c594247e66c5bbe7b3f96e385327ff9de567a78a593d84ba1ad4c7f54e2
- TLSH T14E51F4803AE949E9F3BB4E72EDFE2751487BB9425D35D51E4900820E0836B01D9B3B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.