User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a3524714d977fa9bf87e7357e2ed1d9e90a5e7c44807204a1d9374a87466bf52
General
- Target a3524714d977fa9bf87e7357e2ed1d9e90a5e7c44807204a1d9374a87466bf52.zip
- Size 801B
- Sample260817-sn66aatamh
- SHA256 78d890e018f37d0245146ad200cb05223d5ac72b1dc3d73a21a2a799ff93bffd
- MD5 1a249da8e39913bfb5ef74c418ae6173
- SHA1 6897e5fee583fe325f44264f5051374ce10e0676
- SHA512 d5b01dee2464d7216de7cd216820df16ffddbda6ac119843f526b5eefd5b28de30031b2486d0448867afa14a94289ac2cdca605b10f40e27a12a7b735ec45cbf
- TLSH T13D0141B973A594A1C861F57080A917096470739F8E45EC120000BA704509BA49F51E9B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M4HBJL.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-M4HBJL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-M4HBJL.lnk
- Size 1KB
- SHA256 174ea9fb0322d57556305f41e6bbccb8870ec21bf400259f13f81317c181baf8
- MD5 85a261213857fed3a9fe53c1ce34c5c1
- SHA1 1c78552529f7b1b56c5e70cb3c07f2028b3efc18
- SHA512 c6014d57644ac1602d711e3b09b50e170df7f6f6f64409201c38a7215c3f45a6d8c63ed8d97118bc08f47887dd817baf64164d760e253a04f36f9b2cd6478852
- TLSH T12C3164503EFD0A68F3F78F7284BB5B1089BE78468D10C61D4140864C5032A05E6BAF77
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.