User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b95972aa52bb1b7edf71cfc6ec7175cc37b83955cd0fb1229a8967fb126df027
General
- Target b95972aa52bb1b7edf71cfc6ec7175cc37b83955cd0fb1229a8967fb126df027.zip
- Size 1KB
- Sample260817-t96x3sem51
- SHA256 1411c9cce6403b7facffb60f61753edb5817dd25fbd66597c339efc165e86dff
- MD5 69de2babf635cc1a17598460e078d957
- SHA1 638ad3b7d8308573561883316994e6014be7851a
- SHA512 8b18ac26aa55e053f51254f9d722b1417ceab0df67145ff6fc2fd64226157ac36d42e453895b7edf80c7adaa565974af59a18116036c728fa18af5f9a1668b0f
- TLSH T17721962796B6FCA1F75F4E76485856C34889E6E770220A1D20101C7B043B67B7FE6439
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MVRQGH.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-MVRQGH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-MVRQGH.lnk
- Size 2KB
- SHA256 d4a22cf5fc53fddb00f509589d75c1db1579bb2899ecd3a2a340d4d5d4cccd25
- MD5 97fdc55eaa9987525879b0067e384541
- SHA1 9b87f54825f67b81649da5c65e76dbc466bae397
- SHA512 ba93714066767044881cb165f73e16e688deda93ba3d86c0ba9059d17c93b0254d904ab869dd2bb2052bc754b2effea558e62095c4426d04aec36ca952ecc083
- TLSH T15C4103903AE901A9F3BF9E76D9BE67114C7BB8526D60D54D4840C24E1832F02DDB2B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.