User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:cadf307797f2585910ab5045bf537beede7fb7a9f457fd8347add227dcdb03e9
General
- Target cadf307797f2585910ab5045bf537beede7fb7a9f457fd8347add227dcdb03e9.zip
- Size 803B
- Sample260818-pfkqjasand
- SHA256 6dba902b2fb8cf362f1ff91b85404fa07130942cb209287ab46634ea30517356
- MD5 22fecd779a548729b011d21f59b3c21c
- SHA1 a9177a743d526eed86a44bfa827ebceb329827a6
- SHA512 0f6c2c815a024273b1cc6042ee772b9334c77c71c2063fda6f7bffff74bca93e9f6e2ff0d7afb7bbe7f1eb03e5833cafa3cc09dde06ded0da4f1be3bb454a5df
- TLSH T1EA01F1012B3BBB67F0E24D3D071812E5B2A96A2617C5624B398D15780854DB259CA8A9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L1NCV1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-L1NCV1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-L1NCV1.lnk
- Size 1KB
- SHA256 f22a030088b0ba8b25974e3cdebf071f910f0465e4f6ada18dd0038a38f2c41a
- MD5 906b795d9d4aad84c8587061bfbe7cbf
- SHA1 2b241a3f2f5736c836f225a6945e8e8dc3707145
- SHA512 0aefd74e3acfde8bb918685bef088141a8d50e10d19b0379bfc8fc9e02fb81fecf2f9cd9440cb70e4502c2f96f3df4480f0dd4f146349e18b4952e45c2411107
- TLSH T1943124103EFD0664F3B39F7685BB571089BB78968E20CA2E4140864D9072A15E67BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.