User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3976be7d6cc712da037be68c55b1de6aaa2ce52d1aaa4f1528cb31fce02353f7
General
- Target 3976be7d6cc712da037be68c55b1de6aaa2ce52d1aaa4f1528cb31fce02353f7.zip
- Size 806B
- Sample260828-j2ethsgj5t
- SHA256 559e059c0993ce11ee0acbad9e2b700cd72d1e25b6cf3a0ee04151a846dd160e
- MD5 0db048b9119b55448ad706215d90d715
- SHA1 76c98b97a333b1a5b081e014bb18780d4cca72db
- SHA512 9da2530271c236f3a2220758dcf4f11f4d08ccee25cddcf649af8e56aa4c80fa146562a4ca78fde9f09246ca36b829d9c74dbd8acf9caf8c175029a7fdeeb863
- TLSH T1E701709478D4E2DFF91BD8B361D112E188E363A8CE225159ACB4194ADC22EF08A7DD11
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BP8OJU.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-BP8OJU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-BP8OJU.lnk
- Size 1KB
- SHA256 3c309a88148f6f69d1e044131ffa2cac54021dcdba1da021fe7b9550e8145118
- MD5 aa0fdbf5c65fe26ebb2f1eaef8f00374
- SHA1 2bc19a4f608261ea344b05f15d7051968052397e
- SHA512 6d9a6f689946f638eed91e209ff7aad5c3fd42f7b65af8067e6fbac6c1cae77c59c84278d890d3334de753b16a03eed8cac4afeed9e408cb13e2fa1e93f59222
- TLSH T11B317B403FE90618F3F38E7398BB9B1489BFB9668E20CA1D4150454D1072615E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.