User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:89ceba9bf7706e52bdab074870e8006576b895820f884dbd9949c56531b3a742
General
- Target 89ceba9bf7706e52bdab074870e8006576b895820f884dbd9949c56531b3a742.zip
- Size 806B
- Sample260818-q293zshe97
- SHA256 3f37c583eedf7e94fc859f70807ae1949a542e35394a1dc502bc62229d58db02
- MD5 ea8e45e039b2232a47bf5548d2a28823
- SHA1 ca81f2d91fb69beca17403d4967b270c184544af
- SHA512 c8ddfb9876ec29bbbdb4011bf1284dce105207fbd948115e039d414c067b7918b81bbf270d9e450c29d87e3c699510d2ee6b190caba718157625e05b186c9ae2
- TLSH T14B014101360B2FB6C49BC8F94CD4A6A1BE35802D67D028952D9E5AC28A10B3B97CB784
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YC0RIW.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-YC0RIW.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-YC0RIW.lnk
- Size 1KB
- SHA256 c29f4d771b153b3e5fa6ce02a0528d7fb45a6f98432ff2af8f3837849945be63
- MD5 1f9d28f6b46293cdc6ea7ce97ceeab41
- SHA1 0bc7b6b030cb5457720121ad624df4fcef05d57b
- SHA512 d60913340381e3b0d07639d10df37472bcf26abc92d4bebf312ff063bbed9b8179045cbdd02461f5a9a88a36550bdb0cdd23b307786505f2331e6616d7ce422f
- TLSH T13E3197103EFC0624F3F7AF7284BB572089BB78568E22C62D0150854C5532A01E6BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.