User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3c360cae28c01291b78034c0977b4d5c9f9cab33396ce0e0c3229214995ef9ce
General
- Target 3c360cae28c01291b78034c0977b4d5c9f9cab33396ce0e0c3229214995ef9ce.zip
- Size 1KB
- Sample260830-1q8e5asyds
- SHA256 61747c54c49c269ababe37270ec2694f59187ea54d863ec816fb5339bbc116e8
- MD5 03ea763597c4fd773f73ccce9f2a66d6
- SHA1 92d7f35197a328e8b2493033d84b4cc4c00d744a
- SHA512 faa623efeb2033e5940a83d4a1b25fa2749f38dd7a8fac04a4265d5aec1d7a1232b7f0729ae2af9df85373031aa8c73e2ff37db9c392262b04c907e5208d9817
- TLSH T1EC215466AC2E4F82C1831C3E5D2AAE6A5A49D5A03708596AA8300C16B150CE90B5ADE1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-C41Y8F.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-C41Y8F.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-adobe.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-C41Y8F.lnk
- Size 2KB
- SHA256 ad95e5767c7cfd2bd2aead4a3388a292525a7a830a79e62378196c05673b2f29
- MD5 e18d2e4a1fa1d285bcbc503f81eb3e0f
- SHA1 261745f5c3ede23218732496bd8035cebd11c747
- SHA512 b9709dc8bd78700471197b6be64f956cb43ecf07b7cb3bcc5a904b764a075308901097bc1cfe57cd2d8a2042fa2705a2e0da561fc16a3f4d12a0cb7e797f8a8d
- TLSH T1FF41F1803AEA01E8F3FB5F72EDBE6B91853BBD516D21D58D4840C24C1822744D9B7B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.