User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:f0406ca0d2d9baa3ea71dd40b3a06fd3df4515fb1cc35836fc04baa456c00d5c
General
- Target f0406ca0d2d9baa3ea71dd40b3a06fd3df4515fb1cc35836fc04baa456c00d5c.zip
- Size 804B
- Sample260818-syetsavepd
- SHA256 4d6b98d7feeddec7f4dd73757f56c2ccea5dc62ab4588b17bfa99f93d6069e68
- MD5 b679565dcc8bf074dcebb13bec5a5b02
- SHA1 fd1ca23838e2e226c33bf0ee3a67e00e0cbd1e56
- SHA512 da5e52ee5263d34d0941cb2fd5ba96c25bbbb349918a374786865aabeb1552502456c44f4f292d50603a0e13f8207425963666d1841a0f885614f885d183dd91
- TLSH T1010146056C25157CD492427F871D4C3609C95188371549D84A9E2B65C830E8CAB89E6A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y6RZ78.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Y6RZ78.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-Y6RZ78.lnk
- Size 1KB
- SHA256 e4dfd86dbd026027736b42f40499ded004bb355b997a4adab8a9ae3cb61deab2
- MD5 3c1a7709412acb0eec2b3ee498620687
- SHA1 de4680f3ce9e6a6b7ea3f728266a82cb443f5d92
- SHA512 dc2f71ea98761bf93cd2e897e0a253c81c48efa4a41980e56b5cdbe12de8ef2733e86718c8ac0d52601b6c08a3deb5f2adaaba72a63e0ed5cb75281477bd424d
- TLSH T18D3147103EFD0664F3B79F7684BB5B2089BB78568D10C62E0140864D9472A11EA7AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.