User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b02b3b2c4bd06f9739276c4d3a06fccadf6ce8fcb1e3c6afa1ff22586828f8fe
General
- Target b02b3b2c4bd06f9739276c4d3a06fccadf6ce8fcb1e3c6afa1ff22586828f8fe.zip
- Size 806B
- Sample260817-tqjy7svalh
- SHA256 47c3f1386ec1d6494d5f9aa14ae031fd5a8ad5207d52c76b3b450afb6d9afd9e
- MD5 5340b51ccc6aa0231816b64aca6c6b68
- SHA1 4f30df8376a1d333c5368489a15f4bacd08cd9b5
- SHA512 235ba540013bfcc25fb10c1775794f6e4fc74261b752cd99a66491a94f7bcd238fdd35ca9f32b8ffc57520b316066d4e39ce18ddd5826248b7d44ebb96605c29
- TLSH T1A601414F1AEE1483C485613026FA252D580153992AE0A5EA4058738E1462FFF8B6681B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QQ4IA0.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-QQ4IA0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-QQ4IA0.lnk
- Size 1KB
- SHA256 ec070d18895b43eb83298ed383c62eeeac355ca94bfc5c82e19f2b9d0bf1d2e4
- MD5 c1f47b68b6abc8d120269f6056731f05
- SHA1 a0a77e672c20e6c33526f884e2ea5599cfb9ef15
- SHA512 afe47afb30431d88db612908496f4903f947321b951a1a6559457214df8599d387757e0c8e7cc9d3434d6ea2b7c439ead2af512f7bb42bb35de49dec278e8635
- TLSH T1463147107EFD0A64F3F79F7684BB672089BBB9568E20C61D0140864C1432A05E67BF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.