User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:14156589702c96f3582b22d94480eae9f175f96d944d51451c09fb10b7c85e5b
General
- Target 14156589702c96f3582b22d94480eae9f175f96d944d51451c09fb10b7c85e5b.zip
- Size 796B
- Sample260828-h65p3atzds
- SHA256 ff079342159910230780280403e10308ed80529566b38bd351178d706042ed83
- MD5 db2aab4d607f31b814d8e52314be09b0
- SHA1 ec533ab1c3ddcdc0119d873c1280359d1d9759b6
- SHA512 88c883e43c09b760a057436ea8666508f812c3400c530224dcdeedafe381fedfe218da16b4400bdc5b23b64b0e2e48ccb66017777e573f86773cdaebaad16c9c
- TLSH T17E0125784BAD9FC7D2964A74458D9945DF5899544F0E1417104DF8400D336713F5DF12
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HGU3EO.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-HGU3EO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-HGU3EO.lnk
- Size 1KB
- SHA256 b88820a0914bcbef167b3c4bc36b0fc512fdc41fee3016f4145a66c44501b78a
- MD5 3ace9960f688a891356cdcf2edd031e8
- SHA1 039b395288aadae30ce3620312ff68bdbf654fa2
- SHA512 3b4c66f2110b0914b56b3be3cdd3fa8fe9320ce9cb6e6251582d3c37cc3b7ebc65ac639c19e5bff03c2e7a1a5ff7bdbbcc2e764b7b31e08cb666c07e1f3e707b
- TLSH T1BD317B103FED1628F3F38E7398BB571446BBB9568E20CA1E4150454D1032A15E17AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.