User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a08ddc645e2870c3ca42b010bd288b2b192639d5808974328cf4d8e436beac9a
General
- Target a08ddc645e2870c3ca42b010bd288b2b192639d5808974328cf4d8e436beac9a.zip
- Size 804B
- Sample260818-n62lassyhs
- SHA256 32ed669249c601dbe17a2276c5d06d91a719df38e769c9b3c0f395435fcb3c7b
- MD5 c6ba8fde894f033c61aa92213fdbf55d
- SHA1 7cccc80321a1e17c3055f12f7912060858af4416
- SHA512 b15a2e6d145c2064338e118b0444393fb922dd3210a1531733ae66c2a4f048f51eab2a5fab80362d288a590428cf1d1b59fca6ac0e085d90e4cd8b6328c248f2
- TLSH T1300141382B753931F11F95744155368EBDF600304107DB13A198F8B90F841E64B41EBA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MX64WH.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-MX64WH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-MX64WH.lnk
- Size 1KB
- SHA256 4a8cd6fb452e834a2771895ca3a03fcfca0f6d3814efe5d37b0ff8017d157067
- MD5 842bbf8d0fb3416e76876183a298fe79
- SHA1 84a94d20e2064074d4006f175db9bd606a40af50
- SHA512 fa9dae1c10b8953db05bdfb78e2c0657696d9753fcc726e86ea8eb13410c1525ce4d6cf0a755043614f7e827818d4e3ba1b32f64bec6eae4321d0a0cbe7bb5f2
- TLSH T18E3124103EF90624F3B3AE7684BB572489BB78568D20CA1D01408A4C6432A11E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.