User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:8a37d3d19be7f301201f61c0095fc1dac28761df45acb0850992c184b9c31ea5
General
- Target 8a37d3d19be7f301201f61c0095fc1dac28761df45acb0850992c184b9c31ea5.zip
- Size 814B
- Sample260831-rt4fxatelh
- SHA256 8619fcc88dd7cf26fff8b99e08a5d6328c14efd196c592699c4ae93cb207a1ce
- MD5 411586bf44712f07c0ac0c921cb358a0
- SHA1 60ad309800ee157dadac98871366345328c912d5
- SHA512 b2ee0a158babeb13b59e69c70ad0ffb8451736c8372ac69f4a679ff248b992a1abe2aee8047ad0de87f0fe4bff9d88b4bbc0d64387a650c1fc8099b1cf83aa47
- TLSH T1C801815B621BBF6FE1A1C5B00A05546C00A448D392C8A5E69D4024548BE8985DAE35F8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EDLSXH.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-EDLSXH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EDLSXH.lnk
- Size 1KB
- SHA256 07d1650d62e1bab730dd4d8e45ffb68c5ef021aa8eb9e01c9006d0604ecb983a
- MD5 9e7adbf1ee4d87b0b2ccfbf8278d2bb5
- SHA1 05b44406100c183ff3ce82a8279db3dbd137fe4a
- SHA512 b414852fee02f75938d63b8d59deb6fcf6c57dc0718213323b31a950c659cd15a5b6186356471bc6ce81cc78bb842ec9eedb700602443eda9d48c2960183d43d
- TLSH T166317B503FFD0624F3F38F7794BB672489BBB8AA8E20CA6E0141454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.