User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:858fe13cb7246e27bca752020094c640ecd0b3ad3ee1dd9cf2a96c9d43d8c04a
General
- Target 858fe13cb7246e27bca752020094c640ecd0b3ad3ee1dd9cf2a96c9d43d8c04a.zip
- Size 793B
- Sample260901-26d2wscn5w
- SHA256 1b8d74bdeef28773310156de6cd4345e00654a0fc37a064b72db3ad6b1da850f
- MD5 740860700b5cacf0050e22aa21605909
- SHA1 2549c2df0d390941a80b3a103c73186c98f8e9e0
- SHA512 29c24256ce0d5697367270e2d8cf44a5b0147312d82bf42daf8b683ce4970d7732204d5b9c9529806b0603f3c91b2b4e55a7508c7301061dd8ca509e2c20186e
- TLSH T1330175D0446F3580E072363D428EA390EC331FE94E770B9E3730B28A1212ED064C0913
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y0IPU3.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Y0IPU3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-Y0IPU3.lnk
- Size 1KB
- SHA256 27e8f316ac647e34bf725522e58ef18158ed77e105ed3173550e4eb8034bf17c
- MD5 bd5b4e481da2337806dcccd5209ef3a6
- SHA1 10ddd35b606b822a1ca653cc152e2b7f5f4b2da6
- SHA512 47233200d1f0ade28a5da487e78ff853e071d46a0be77b6ccb48664f2c4797eed5001cddd145dc1ce8b22136a6853d22d2f43af3ab3401781f151e28889bb1ba
- TLSH T1FE319E503FF90A58F3F78F7398BB5B1089BFB9A58E20C61D4140464C5432615E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.