User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:1f46c14ee4a75d4214da337959957b3a739fdb089679b6725a96766c1a95f90e
General
- Target 1f46c14ee4a75d4214da337959957b3a739fdb089679b6725a96766c1a95f90e.zip
- Size 1KB
- Sample260817-f7w37stemh
- SHA256 8a7d84e16803ac461c614fb5ceec602fb59994f5c88540b9388e7730da9f4e64
- MD5 beb24bb72266ad65caca7c1273e11bd9
- SHA1 6477c0d244ab903ebf844284106b74c53e3c8b26
- SHA512 cca2727d721ec9d377773524615fd36a99bee323ba516cd825a5b1e0bb987951157892f786a853f3de2c4aaf46ed1b1a0845fbdb04e8f7971ff30e14a83a6a9c
- TLSH T12821A36E697AFD74F8F7BCB4033E4415A66CDD462E0A60259924B79B0C751381E8C932
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CEPEV8.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-CEPEV8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-CEPEV8.lnk
- Size 2KB
- SHA256 36328307f4e0b9ebc28ac1e72ce28c98f42323525be0400da0f2e80d315808c5
- MD5 fb7cc826c35253946689b2e86375912b
- SHA1 da9345602aa834b0bab70284c9c2542139a4f66a
- SHA512 92c4ca51420ba3b99285296ef27d676bbf4917622a08ef3371abc6a23aa0fb8c1f95b3eb07085ef2132f06b058c78ec2c939696089300255bed3f9adf951e78e
- TLSH T1284135903EFA4599F3BB8E36EDFA6715887FBA516D90C19D0850C10D1822B01E977B23
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.