User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:474faf497cbe2672b75cda251764702a732c0c3f8dfd6298fd97f67dddca640c
General
- Target 474faf497cbe2672b75cda251764702a732c0c3f8dfd6298fd97f67dddca640c.zip
- Size 1KB
- Sample260817-ket6cswfpf
- SHA256 9cfed3f994b7bcd37d05aa75e2607ccccde7898a9a6d70fc7aa2a69e31f80f85
- MD5 94e876b75baa40f25e83e5d8c13f9b1a
- SHA1 627bd34716a0c4d6300a1f493bd7e2e64abcd2f3
- SHA512 229b43e2a518dc4ba5227613b6469d47fc3f570451d9bdbf40d20079194d3521336eac725f349d7ecba6e2fb2a205eb06976731aba74c491fa6ed4eb56e8f5f3
- TLSH T1EE218440676058C1CD916277EF0603583954F9F0F99A7B4F27B90D1280927F2AE8B268
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-15NB15.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-15NB15.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-15NB15.lnk
- Size 2KB
- SHA256 51d5a00171cacc20fb4b0f9a3a05985fcf42301da6f6e3fcb93a3a52cf3779ac
- MD5 4d0b3bda64d47571d1d46852cc677cce
- SHA1 3ba016916b9b04a08a17b8fb2e506c1a3e909ec3
- SHA512 d72ca11f0e0e6de7dc2993ff4b487e5e1271472ca0fcbb2a02ea31aed46167466e8c0cabab3b4f0efa213bc03c33cba290e2d00391e5240ad75dc8c69229db8d
- TLSH T18E51F5902AEA05D8F3BB5E32EDFE635049BBB9566D70C5DC0990820D0822B41DA77F77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.