User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:d97ad95608d50d4e1efd77abaacd33f063ff40a4524f7c65124ae2c2d5a19085
General
- Target d97ad95608d50d4e1efd77abaacd33f063ff40a4524f7c65124ae2c2d5a19085.zip
- Size 1KB
- Sample260817-xzemmaxflc
- SHA256 1086d75b6249078c5d3e5731f07240922ad546a5fab07bb7281af49658e28bfd
- MD5 f8565412f96d698700775c01c45ffab3
- SHA1 aac186099a5cef37011933100a468c6d542ed401
- SHA512 3b1b0289b0d878cdc961e0f1a73c3f1843e581fc361c8b2e63c2df60c23738e85cbc9d901ea2917f818d1759cf2b431a22986124796c8102b1b523ce07b8894a
- TLSH T19F2196CC3B68BE61C146883360D61BF07A9C3312E061D536ED14A6E08C4DF463EA755B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MEXWKB.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-MEXWKB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-MEXWKB.lnk
- Size 2KB
- SHA256 112834f3c7f8d97af8049869b613f548deb3a0b2146625dcb14ec193c25442a9
- MD5 c7d25faadbbbb0c493ce15a2d7d1a9bf
- SHA1 52c5e45043ca1ea4effc1eeba83fc601b94b400f
- SHA512 1de0311997b260ad2cbbae41bfb311eb94ccc5f9a61731d03190f58c27769a25107fa014e9ead33b80ccb0f651c1e83052ed25b6d577260939b99dab68e47583
- TLSH T10F41E4947AED41D4F3BB8E72EDBA774189BB7C628D20C5DD0890810D1872B01EA77B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.