User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:9e1754f0a560331a4532d22ff9a341407d793839a84d3e283e98f5aababf09d0
General
- Target 9e1754f0a560331a4532d22ff9a341407d793839a84d3e283e98f5aababf09d0.zip
- Size 808B
- Sample260817-sdrb3stvfs
- SHA256 a3a6d2b269b4c56a470745f43108db6aacd1a932e4516cb259a25e8e949062b6
- MD5 ade6a7424825075ace724af9767bc0f9
- SHA1 6a4a4040747cb7a96d982f8669e77e060913319c
- SHA512 ca65706ab3431e72a37e09ca16439357bbcef8478c627f92947435e5d29e08c84dbee78492b9ec7aad38dbcef719812744134bcf0500d7739a14cb8eb8b4116d
- TLSH T1CB01750A367D484EE7439D3698C8DF28DA81524DE9A991545BACE230402FFCF0B2B869
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DG8WQ7.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DG8WQ7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-DG8WQ7.lnk
- Size 1KB
- SHA256 e914b11f4daad138fa8541c2360dc2985803caa58ee9df1a831d1c0b66efa414
- MD5 4127e7d4d086f4e55ba36f2a848ac3c9
- SHA1 7e98ba7df3cadce99ffa32a5a0c0bfbd6832e61f
- SHA512 dd0004f54b26c6d3687cda34ed386aae09fbdc3958df11dbf10d5d2c2fba9e911b1eacd867851ac7be41f4dff8e7e86bd276ab88d4def7042fc7fedbf72bab2f
- TLSH T1283124102FF90624F3B39F7684BB671089BBB99A8D14CA1D4141864D1032B01E6BAF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.