User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:d9719dabf64bcb9b12f740e2fd1d8e9c9fafd939d09658bb1b1d1780ccb44aa4
General
- Target d9719dabf64bcb9b12f740e2fd1d8e9c9fafd939d09658bb1b1d1780ccb44aa4.zip
- Size 802B
- Sample260818-ncwsyshr3w
- SHA256 43491bc8fc69922b2ca5b4b04006e440314879995803f829a19df2a533978ee7
- MD5 f83bf262ed17d34eec94e7626b834d9a
- SHA1 ac8c0eb4aa13a00ecb1423ca458dbfc62bb1730e
- SHA512 31bea98b2b85839c723c2111ccdc64b3ab3a38b8bee4b16eeed6ddcd71b7a0e6c768efe96386acd480e367b689ac75707abbe5e698bf86ab8e16f8d45c4c0653
- TLSH T119017012F3A53B43DF6BE33E5716A206A51E436AC7560EC88CC787780500BA88AA540E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-B2UJ8Z.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-B2UJ8Z.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-B2UJ8Z.lnk
- Size 1KB
- SHA256 f28ff1677a46dd274184eb7fd4af2a0906a5909fe24241fce7b7475314f426a5
- MD5 c9a80fdca6c1f4c78d55bf547179ba7c
- SHA1 1b1919a64c4d8e5f0c1d796527f30d0cf077fd91
- SHA512 bfc00df99ec351f35c8d9fc5f6fc6f29bd25ab77a4bf0bd83fff6c14ac1ace6b78233a3524c72d2ce8a58921030c6e42aefa12eb47a6cca6b99ec54fa26b842b
- TLSH T1B33147103EFD0624F3F79F7685BB5B2089BF785A8D10C62D0140854D5432A02E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.