User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:269357bf12cd38be45418876b54588ee87e24d4647e24c8df3fa4fb09e63a20f
General
- Target 269357bf12cd38be45418876b54588ee87e24d4647e24c8df3fa4fb09e63a20f.zip
- Size 1KB
- Sample260817-grfa7atgrb
- SHA256 ab3c8d85e26fd5ec9734241c28d2dce9f753c77b1bb88336b2a11843b077ef36
- MD5 ff4e10d45fc8a56bf7da66f72e324332
- SHA1 dadf69cf4b672e080a311ea49142dca03b13412c
- SHA512 d340e7e7d03022c3932beeb5363d44178896c63473ae869788af2d2eea9bc00c9748275d6bb4a60602f3332a9043923949eb3d684f0df81ba2c4ea73135d0e94
- TLSH T1F221776223471853E4375FBE215E4713411BB6F1D4D386EE4A709984098D963B768FA2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EQ8025.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-EQ8025.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-EQ8025.lnk
- Size 2KB
- SHA256 120fc4fea87eae5dcd002d8689c8a51379fdec4b5047a30a420d0abe30100657
- MD5 7ef713b5bf505eadfc40b0271c850244
- SHA1 6c7f697d30b8b98247d0b470e78a7bf1ae112226
- SHA512 930ed1ff2efb8a08ec8cb6ca3717015e8c335d10501811add0db7b4a8ddb56a06b8b32dff7d47f25e16a67596dda798a541baf806a99b4584517f8c6109e0bc3
- TLSH T1295152802AFD04D4F2BB9E72DEBE6790497BBD622D30C59C4881810E0922B80D973B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.