User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:500fee33ed8c444aa29481b08ca08983a734dd8c842d4138ef3c9e57b98da02c
General
- Target 500fee33ed8c444aa29481b08ca08983a734dd8c842d4138ef3c9e57b98da02c.zip
- Size 803B
- Sample260818-mwsd7s1bjb
- SHA256 4b6b9161593a9d1338115c28ed1daff8283b51ece97b7fedbd46407168456517
- MD5 7a3f1a4380f8e4184456ffd4f77bd7d1
- SHA1 7914966182a51466d29fba14258646a5b5884c1e
- SHA512 00f5de8d5f9b7469172270e708cbdce88aecf10a342a3083b03091d048cc5452bfc397d1467fc346bf2cc9552d4e45080ba560f929a97c1b8d79173c89ddab6a
- TLSH T1C701F168812A6516FC23E73BDD50548DBF6133A40F664F8104C8A925717BFCE96035B7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HOXQRN.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-HOXQRN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-HOXQRN.lnk
- Size 1KB
- SHA256 b4f87d18de9afd6ec8b2d6ad18c98013c9d8551c6d8bce41d2d0c4b0ae9e14bf
- MD5 8bff583febe694ae76e66cd5528ca4a0
- SHA1 e958dfa73d99ff114182cfba62c2259dfd00845b
- SHA512 73061cb7a4ef876e8144392bda58b84db88d361298cf01706687c1121b7fd5f1dce6993643d15442f936b596dc3f4433d59fc55e03ea35a7a870e612502ae817
- TLSH T1603147103EFD0A64F3F39F7684BB97208ABB799A8D14D61D01408A4C5032A05E67BF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.