User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:d2d6b27c29fa13b5c1fb5b90575df9c5e3283c5485726cc14e34444f955899f0
General
- Target d2d6b27c29fa13b5c1fb5b90575df9c5e3283c5485726cc14e34444f955899f0.zip
- Size 809B
- Sample260827-e1v2wsgc24
- SHA256 7f3e9c604ec0a1723044f744316ba4066f277cdb3ce9af1d8788508b7c879b58
- MD5 4d822c911ea7769ad4a6ca77c1615dca
- SHA1 4ab9aa5272f87a9313d5308a792065e8d7546962
- SHA512 cce72fb2a43a55effd26f706de4c5dc3be8d1fcbda216bf6a35fdf7e026b58ce8a5bd13ca93b749bd14fbb07682202b10d0540392782b9962b704e045b44c6ce
- TLSH T1C001704FB0C29DA5F903057962225833FB1364201E6888E787BEBF436B845E4A61058C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DPY0CK.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DPY0CK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DPY0CK.lnk
- Size 1KB
- SHA256 43a79837857c4a7ac0a61caa02187272f2999f5f83bf11dcc24f23153717d7fa
- MD5 ae80be896670e935a62dd0199637e4c3
- SHA1 d2f9823e2b387c0f7c4627eb82307fd3a2745b8d
- SHA512 fe0d1ba47d7781b6aecff68b9541b29354924bdc50b941f76664a7d34c1affbd6963c7b8f8f19fdbccad751905fb2e4ed0597b73beaa8ed1cd761dd712c02b32
- TLSH T13E3147503FED0664F3F38E7794BB572489BAB8A68D20CA2E4141464C5022A15E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.