User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:103ad51b11148e292ef87de13494286580f3f1ae48b20ddb1baaff817d626cd8
General
- Target 103ad51b11148e292ef87de13494286580f3f1ae48b20ddb1baaff817d626cd8.zip
- Size 1KB
- Sample260817-d5afbaszbt
- SHA256 6519f3f4b31fbb7dbbd655ead8350c54fa21e05f36e9401091089f63f0eddab9
- MD5 a76796ad5cc13fa8c62dfd7799cfa292
- SHA1 a50618a10cf38adce1f86114b40f66e0ec5f8cec
- SHA512 b42ba03d7ef3550f0494022cc9783d3c4d12673ed10bdb3ed0ccc2ea6ceeab7088958c63216ca1ccc801fa9851334988bb69f9f1d8002fe23d323a412cbd1b9e
- TLSH T19921C62613F93F21E11A84363202B445B6E952AAEE00F525A78641BB0B75BF3290BF10
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BG3HZQ.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-BG3HZQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-BG3HZQ.lnk
- Size 2KB
- SHA256 fd342edaee52c16de55dadff5251c977305a295daaa41aa5ca187400a43590e8
- MD5 e3bb57779dcf12356bb62035dbdb17bc
- SHA1 9b6d613beac0c428cf00c785889263069066487c
- SHA512 eb124956ae8f5536ec3500368606b730f144f54824feff05f038bb3fa130b01e3365330779e3486e9bae3c55e0b137b29a0a58cc24ac41b9f89ac0fb6174a2f4
- TLSH T1BC4177502AED01D8F2FB9F36E9BE375198BB79A26E60C58D0890810D0821B01D9B7B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.