User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7f9d88e27c2f4a04501741697832d5f0d2071cb24454347c20647436d7596780
General
- Target 7f9d88e27c2f4a04501741697832d5f0d2071cb24454347c20647436d7596780.zip
- Size 807B
- Sample260818-tf47dsdm6x
- SHA256 9080fe6b441a195c42d8c31b105eadb956e658dd14d11981b1cc06b3f21a3df4
- MD5 1ee4db392be56ebeb77942774d95982d
- SHA1 9ab1e5371477887150db4190c1b6856e87ef4dcc
- SHA512 0dbdfff55aea13a1ae436ffb5a653e55ccea4625bb18bba8f31bc529e8c7c1567dbbded02abb02039eb8c39ede9b425aaf8b787abcea20254b6df539601dfbf4
- TLSH T149017580B76B2A11CC16093422B4590916B19D93A413E71BCF1F02F4FC678D7CD0087B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VAA4VX.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-VAA4VX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-VAA4VX.lnk
- Size 1KB
- SHA256 38478a9b723dbc58e8872a7b435f76fbc7bc4411064745dd60d5d7eb26eb8150
- MD5 0f6664580e688c952021d3f35369960f
- SHA1 d351254ae3b5cd02361dfa979514cf79aff2716b
- SHA512 ded2bd30d96d0931847b71fdb1f178866f16652ad691036d0e29d93a90e64dcb5c624549e87936e8b031372924465264d8fad72e04124fe4f7d7a90787a8018f
- TLSH T1BA314C102FFD0554F3F79F7694BB57108ABB78558D60C61E4141454C1032A11E97BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.