User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7647a9d622f4432da0925d62d1b0c50f2a6e759f12e95a270205a083d98be9eb
General
- Target 7647a9d622f4432da0925d62d1b0c50f2a6e759f12e95a270205a083d98be9eb.zip
- Size 807B
- Sample260818-e5ssbswzgx
- SHA256 c69d0023cde9ac0ab2da968627dac95b7535ad3a59c22b4f1df18decb9a9ffa7
- MD5 53f4c2d5210730cecfaa77a3a6517fcc
- SHA1 8de5a2a9056e3eecace59b996a84983d21a8bb6b
- SHA512 4e6f0fbd0cc3a13c384a92abbf58e04e4d0432d3ff264845271e45d8cf4aa309384bdc836fc54d1b52db5a6044b2cab473461d295655780e1b32b0aa4c9c3902
- TLSH T189014149493B2850D58724F27838D6D979B39E560C30AB241BDA74A948E5AB80797C92
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-47NGFA.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-47NGFA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-47NGFA.lnk
- Size 1KB
- SHA256 a67139ce80a7c2970aad8bcd71a9947a0e53decd263f9c5e232c3ded40df243e
- MD5 5402b905e58edd97ec32f7752ed36220
- SHA1 784fb4af050d6d0ce1bbb7e0ccad8c343e55c7f3
- SHA512 b6dacc4d40726b4599d9087f2f122853ffb68380cfec9c49b246c9f8a91f1db0820ea3d855391e07c293a4b26b63cbcf449c5189becaa8de778678609669e697
- TLSH T1FE3197103EFE0628F3F7DF7284BB572099BBB8468D14D61D0140854C1032A01E67AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.