User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:5908928bc550b55a9b16a69dff868c990f3156eb5a76dfc3dd434e8b036dddf9
General
- Target 5908928bc550b55a9b16a69dff868c990f3156eb5a76dfc3dd434e8b036dddf9.zip
- Size 1KB
- Sample260817-l13kasxerg
- SHA256 7b8da4d83ca9ca1ed6460c22a623e6fc741b912f9ddbd96fd4d42fc3e83db90e
- MD5 49a4c92aeac58641433ee968e30d0901
- SHA1 5639723af731d0569068625a8fa9071829fb30bf
- SHA512 9a8cf7b4bea7fbb7a35bd18491bc33e7374834282dfcb1ca85d1f79cdd81147ea643703682ae2a5cc816ef5eb36d789a5e58e12b132b19535c198c64880aa477
- TLSH T1201186E455399E44D881D974FAE7C59443C42A505850570F3A7B17A213100AC7F075FD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G58W97.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-G58W97.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-G58W97.lnk
- Size 2KB
- SHA256 fc22ff0846f10352a882fb7928c575c5f199cc30ce55123c623d82a857ee8d12
- MD5 8d0f4f609077f34419a7b7795358ea0b
- SHA1 85917246346c8fbd098ae8a132b163c855ed74ec
- SHA512 eadc9fc59df05721c20a280aa85c49259894f3b7ac95592c55810e776d252089a9b72df69ba5de8a0c4768de52c42b6513557529522f03519f5a6c94afe097ff
- TLSH T1D54148502AF905D4F3FB9E72DDFE67204A7BB8524DA1C65D0951820C0422B06E977B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.