User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:03e7779ee7dedf7aeec5241ffdb534bf6abcb46f47a4a9823bba312e9dd64d45
General
- Target 03e7779ee7dedf7aeec5241ffdb534bf6abcb46f47a4a9823bba312e9dd64d45.zip
- Size 1KB
- Sample260816-qbpdlaycpe
- SHA256 b40cd6fecc0e22adfb7b8eaf9632928757ec2e69a4012ed83e1856317bd7e950
- MD5 b260bfe4b3a1b11e3f19d791327225b3
- SHA1 24057e22fa695fbb7d8426edefd04377ef3f33bb
- SHA512 f1b209c697fcd4a83ef20ed7d04362669e4a3039765534543cef9e3978a436eae85269ab03ca81e8747f05f5888def30b411218afa6e1b33df967daaeedaa88d
- TLSH T135118226942A2CA6FC00A8B80330C76B59792348BC80F56D5E1A4974C529FD06D4F069
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CKXUBF.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-CKXUBF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-CKXUBF.lnk
- Size 2KB
- SHA256 a9fdfec07c3b5b685122d6c776aa4f6436454f6c752cf5065176b1c38e69369b
- MD5 60dccb34110064222e9609a827f6b65d
- SHA1 8a665a026c246390d9045cdb159018bb0e234e8d
- SHA512 6b53260b1c47ce3981b19e1980ec42217c8666a619e90b64561b0cf4209b5ac0f1757946ee00184e69b3658dbdae5fc7e9981fd178ec89e6a1eee5c85bc04107
- TLSH T1654136902EFA41E4F2B78E73EDBE2715487BB9925D60C69D0450824E0862B05E633B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.