User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7d33b28531b7bfb14488324cc04e2226051802c7c8c65ef9111afd2c2cdb6f59
General
- Target 7d33b28531b7bfb14488324cc04e2226051802c7c8c65ef9111afd2c2cdb6f59.zip
- Size 1KB
- Sample260817-pp216szfnc
- SHA256 1693d5d0e3d8e58ec594d66b01b1281dc91a6648635074f261070d8e27da33cd
- MD5 25bc736ed92f12533fb5aa22f8a77def
- SHA1 eb0c1b79dd8213dfa7517856cccacb523a0df015
- SHA512 fd016d168875e077bb712c72f337aa87966d5980f01955aa1f1ec0a816c0e696def07809a42fefe9d1d8601b43b3c55ac60f6c5e60db147d49e17f1db60c67c8
- TLSH T142210D70FDA94499D771ACF4F2745054878302D20F56C1954B2911C3480FC67B5D7CB9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GLQYF1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-GLQYF1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-GLQYF1.lnk
- Size 2KB
- SHA256 9c025fd2fa8925dd58bb03be26227d53523fc66e8b9ecfaea4744afa4817d663
- MD5 3586100ea14dc32dfaa98c947194e20c
- SHA1 82baab32c8dcb055bd432098c4536863d6369a83
- SHA512 86b45ea75c08d00448c43cb873507621ab0d2b9f48557f09b5d22c86eb827d86d3c2b8e5159ad29defbc4f5cf343f955569d81f2403fbbdb9517c2624ba9bb1e
- TLSH T1D64153502AEE40A4F3FB9FB2BEBA2751447BB9565D24D2DC0941C20D0822B40E9B3B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.