User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c9488e4ddf314b801bdc59ddd447e6a8708855946d85a731a564bff13f1e4043
General
- Target c9488e4ddf314b801bdc59ddd447e6a8708855946d85a731a564bff13f1e4043.zip
- Size 1KB
- Sample260827-jfvmvazscx
- SHA256 87c622c4c2ace5fc3cbe5757fc36edeb93265e02586eab91efca2bc21123f615
- MD5 9154619200b21c944a9bd72d7df33008
- SHA1 5f3cb366d84267ad69ffbe39a8cd8d174070fb07
- SHA512 097aae0f56af20d05f37f85ee9d7d414689ec986bb974a543220feac6345e923620d9be6d1110d1b365afeb073a8985994f0d9b0d8be01500f327ef9f8ba9cb2
- TLSH T10E21B7DF4BDD26B2E7010034D6B3D0065E21BF62562C2B4A1E559E083CB2D2505D3919
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1ZTA8O.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-1ZTA8O.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1ZTA8O.lnk
- Size 2KB
- SHA256 2068ea22d686b822ee8f084176bfbfde9eb5c234b6e9b6e403881e61318dae11
- MD5 79c19234ee1e37ea60401bfcbb8d0156
- SHA1 77c707bb72998ba5a112e4daade5e4c2e1bb3c31
- SHA512 69a475b9fa153a8f409f7f09368882f8931ae698f43fb71553b32d032573584cd4d9a9b8b3ee6f503fcbae2a6b0ef4c2eddbc38445c223a64812be031cb8e8f8
- TLSH T1C75126803AED15D8F2BB8F72EEFA679049BBFA626D20D68D0450810D4521F45D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.