User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:4d4aa4022e64c7c68a2dd2f2a75f052bfbe91d5c7fccb141692589c472de483c
General
- Target 4d4aa4022e64c7c68a2dd2f2a75f052bfbe91d5c7fccb141692589c472de483c.zip
- Size 1KB
- Sample260827-s5rf6aab68
- SHA256 23858ce1ebf0d80d9005de771b12794c28ce8767d8dcc6be74111b24b6227db4
- MD5 d4d760e758c0114023afaff92cb19fbc
- SHA1 a3f8617ff336d6f974c9e244be0da85ac2fd601a
- SHA512 430c8e9b0d72b693c417df41ba65f94912d389c2e562f9ee17603ac34e33dcf6914fb39e791d8798abfeb7f0700a0a0033f3fba461ef759bf00b9ce02a1fee55
- TLSH T18F11E9B48BFB6CE2C9D48578C1204EA6E42B1DC5CD00F262445140979C7A84312B9D1B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O9MY38.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-O9MY38.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-O9MY38.lnk
- Size 2KB
- SHA256 f781659880df07a0a0f75b73aa9265929fa45e7c3c8b14c977c04ff0b4b6ed10
- MD5 8700e9910b5c62e88455b6633ea9c976
- SHA1 42143f9005436a36fc4ba562901bbf616de00c7c
- SHA512 d5abcb1a01562389400b5761ef147a645b7f3c8e2459e0acae464ba7a0c895dc5366963510c5241ff4fbff95b0ea29e07995441087cf0d96662f73e3701a45fe
- TLSH T1BF4186482BE941D8F3BB8F37DDBE275045BBB9215E60CA8E0840824C0422B05E933B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.