User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3e21c6f5eac3fe497354ac8395616ffb56d8bd3b723018287ca293551a1be8ef
General
- Target 3e21c6f5eac3fe497354ac8395616ffb56d8bd3b723018287ca293551a1be8ef.zip
- Size 1KB
- Sample260901-2scxnscl3x
- SHA256 bc53e84c9a2e5215e7c8d8ea711efb3ec121239962c2ebd656dc334f5ca0dd37
- MD5 0344e5ad851e6ec63c857e9322444ef3
- SHA1 f9431b955fc55050ac29823e81b46c9c7ca6b964
- SHA512 6f146c54cb0553742fab84dc976b7c9b97cac6885b60b1da5bbb63a058de7645bd3d824324682bea40a921c834bf3301b87700927fd923b8da9cc2e87d1a7afa
- TLSH T1A021D70EC282DBACCE76123C9985852AFC898698E13D7BA2090E144C8843E441F3A73A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M277EG.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-M277EG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://geo-pdffiller.lat/h/estagio1.php?r=331061
Targets
-
- Target DOC-M277EG.lnk
- Size 2KB
- SHA256 d8b42bdcd05e9d57b2d23646a84afe41f4ddc21e86cb489ab184481e17b33369
- MD5 7648e6a8d1e61dcc4c5e7a66c22b7dfa
- SHA1 5c3c406bc8baafc91f8ddd8f368eac2b2b555e39
- SHA512 d24bc58d5062dcac13d7c99e229a459e498ed8c118af09f308b5a3ab427fda67924622f6a701296671abaf62fd0054a1d0282c353e5af1b3427c4769047b14dd
- TLSH T160415B9037F90098F3FB9E32EDFA279588BBB5816E64C59D4850C20D0422B02D973B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.