User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:53723f24da9bbe6b727b4d3ab455457c679f8e74e6c9043494a33d120898e3be
General
- Target 53723f24da9bbe6b727b4d3ab455457c679f8e74e6c9043494a33d120898e3be.zip
- Size 805B
- Sample260818-excfdadr8x
- SHA256 0486a9d55068491c08ce13144e3db583c5fc4ca5a5ad6370c1c8b67e346da3e6
- MD5 f0f9cae4526a36bc07d996d9e075f141
- SHA1 76d79f24935e00fd4687dc42c397b9c81d264368
- SHA512 fcdaa48174f0d261203dbc8ef9d1e726c4cf22d4cc0cc0800b58d4df7ab809f9ffb7654b50489129c743f82e6e3850af10a0f9c6ccd2d7bc1b681ffb0a3e058f
- TLSH T13801C5CA47087317FC0BD076E7A0F3B87E79C6500041C23CB82E26D2A50226605C7DC2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IMZVIN.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-IMZVIN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-IMZVIN.lnk
- Size 1KB
- SHA256 72567fdca52138b6da481035f4b1fe336f0ebaf5858423cc70c8d21c2bbf9145
- MD5 c2be67cadc8cb4752d869e773d286c64
- SHA1 a11763a2ae63e6a94f4e735734336bdb0f1cd79e
- SHA512 c086828f69ef5280deb86c0b6a030aef94c426d8716c77c91c46ff40997fac6c757b39d84940bcfae492aab8052f5494bbca1a4fcab04f6e1e94bd6131df0a5f
- TLSH T1CA314C503FFD0618F3B39F76847B571499BBB8958D21C61D0140454D6032A05E5BAF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.