User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:9c99aff4e3bd3833b9323053406414520eb4fb293a601bc4c6f4988304f05a97
General
- Target 9c99aff4e3bd3833b9323053406414520eb4fb293a601bc4c6f4988304f05a97.zip
- Size 805B
- Sample260817-sdjx1adj2t
- SHA256 c840c3e5b31e8ad483363e5db62bbf3bee41373ee9f6afd31ca303574e87d865
- MD5 7eff609ef95f9affdc92f717362e1691
- SHA1 220457fdeccbd7485765b02c62f1d31e52a3c99d
- SHA512 d1663770e783ff3e74c37f2431554410092fc9ab11d153919070a9381c55c980813b2f4b3237d5f5ceb1562174a88bae81e9652c09697f166c40f62beb79abe0
- TLSH T11A014152BB5A8413D101E1B1024F7D863C8948A80713DE69E2A6B0AD0BD098ACBA1C39
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PPPH3Y.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-PPPH3Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-PPPH3Y.lnk
- Size 1KB
- SHA256 5797ca01cc2c4e71d1ba38217d4d967adeef6f835ea95733f98a333c91cd0ccb
- MD5 2e55cde58f35e79b6a0612eba6793f71
- SHA1 d759c9b54adfb49a2b440ba38c47fd15ade56590
- SHA512 6d083135f864f7d35eaea4a40128b419f6acdb10d82e2347461b326c1d7699e9f1f24c9b8920e437fc9593f26fac0e3868c4f4339c287b1c0b470754694a5091
- TLSH T1343147503EFD0A64F3B39F7684BB671099BFB8568D10CA1D4140864D5072A41E67BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.