User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:726fb3b4417252867d4d565150b095d950a36499c06f0130337eda7c428522da
General
- Target 726fb3b4417252867d4d565150b095d950a36499c06f0130337eda7c428522da.zip
- Size 1KB
- Sample260831-1682laswhs
- SHA256 e8613a32e57a64ddc5796be2eca597b36dff151454dc3af9d5405bc5e7b5fc7e
- MD5 5a6da0b4d18adc2cec8d95aaf4933956
- SHA1 f6c68e05090049c28b37664e3b7eb114038924f5
- SHA512 a75be6b222bac916461873af16a2850518b5ca580b726f8dfa63a92964d1cd80212d2e9202e9620303bd44c8cb32430488da1a095fee6e6a61010e72a125f66f
- TLSH T1602196C19E6F4895FC029DF9735218E9397CC18244C184FE8A140B209CFCAE45C412B8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6WKT8Z.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-6WKT8Z.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-6WKT8Z.lnk
- Size 2KB
- SHA256 e17ac6b4ca0a784c8d450a00863e04725b2257625abf6636f84ec5d0c5283408
- MD5 f7b15ede09e864913f6edec4358783db
- SHA1 f5e1bfc5858d067bc8a11a0084263a2d10b7c5ec
- SHA512 0a18b6cedc0410d84a1512dd6646bae90fa790f08543d8df356be00c264850e93845fee233dc5651ed3318e42fce0b7963e3307de3d3d70ec5abb47e833deab5
- TLSH T12B4168803AE910D8F2FF9F36DDFE2790097BF8A12D61C94D0840810C5822B40E577B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.