User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a0c8c85b419fbc13b40f21fd55f8cd84f59f5cacb6f1849bb31ff895017964c6
General
- Target a0c8c85b419fbc13b40f21fd55f8cd84f59f5cacb6f1849bb31ff895017964c6.zip
- Size 806B
- Sample260817-snfnbstalf
- SHA256 30c901e76fed546431c00d53f4606436a603eaae7b0063391b0214758894713b
- MD5 5eb4577dc8b778cd1def080830f643ca
- SHA1 005bc8345cf2146fdcc0840cd1f78479836e466a
- SHA512 22b11a6ad4f7cb5b4735a1244bb3efc9c554dc81476294f8a002ae521ee5f4ff0253b639150d98b35bc60cc32de8451b83e441e8eeea4b6d1b140367aa30897e
- TLSH T1C801F126B75FDA83C4D352FCAF0744D426F909CC2D92238D3C24385A69445BCDF032A8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MXB2Y1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-MXB2Y1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-MXB2Y1.lnk
- Size 1KB
- SHA256 73eef59d46f050bd3d8117a65a1d639fba30d4fdddbdbe2a08781bd2710d1225
- MD5 e606e8e4670b15d9f4485c1580526482
- SHA1 d08d3165e935ab0f5ae9f704b21d631d407db9ff
- SHA512 d86d45dd80c141ef3c0ddd299f2d078a524bc5921b7017f39a333e12687036724414a37fe499d2435a7f6d4b79a79472999e4a49a09d10a39bb4b53f5125e691
- TLSH T1393197503EFC0624F3F39F7384BB671089BFB9668D10C61D0140860D1032A01E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.