User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:873337faa3c806e01cdd670593b682316f7f9cc1b32645acf17f7995d305a3db
General
- Target 873337faa3c806e01cdd670593b682316f7f9cc1b32645acf17f7995d305a3db.zip
- Size 804B
- Sample260821-ff3rnsxta1
- SHA256 d836ed8f65dbd8e190ad2ba04c285ac39d43641d80aab364d56e23298492573c
- MD5 95e1a7538f1d3944839cdf5b5d120ea1
- SHA1 981a63923cb8894b271bc6e45cad9106828b8ec5
- SHA512 434c9bb9d4ee5cb8e27a2156e6be158896fc593018e97685487776cee09c78a19168b6a8887f89caa53d17054f50aa7ab220349427b9365036f6c8d8b8afab60
- TLSH T19901752ECA070D01F18A85F4691193CD7FC44352CF0C0D89C66EF07C40687E057115B7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-K2FPX2.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-K2FPX2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-K2FPX2.lnk
- Size 1KB
- SHA256 15d6d1bf8160dc0501f8ba2f104c2dc68095194c7fe71a739ad439eae4a43dc3
- MD5 a66c912bc1de38a6d045ca04d5969b53
- SHA1 b801c6345c00bad3e4bbdfac67402ce033223c93
- SHA512 e0bccac0737c8dfae93e1f3ed23c448cce499edae2d702160a310ebfaba3316af1c968f0b23e64531e111e5f05ff4ab204b649e9f8e9661d2e028959c07a2691
- TLSH T1E43147503EFD0624F3F39F7784BB671089BBB9568E10CA1E4150854D5032A12E67AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.