User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:b861fe0bf8c615bb8b4907fbc7c566e0df497a6716d54e87e2a4dbf4ccf73e1d
General
- Target b861fe0bf8c615bb8b4907fbc7c566e0df497a6716d54e87e2a4dbf4ccf73e1d.zip
- Size 804B
- Sample260821-fpfcqsxvc1
- SHA256 8d92fe814a6cfdad88010aa9cfbb9bd3651fd083ebf1cb91fc4479dc905b2e7b
- MD5 9cbfbaa8ba8f22b5994c3370deca3d4f
- SHA1 cdbddee36b7ace0cdd9f5f8097f04d78bb2a0426
- SHA512 b6fee9ae1b984b55dbfd60408a05f91e7e01e76892fefabca3fb18f204a878fc5a2bf805bf583a4319b0c26e5887e913589a099a0cea6a787849aeadc027149d
- TLSH T1B30186C341103F92D0134FB50626D7C5F1711CB90E6BE8387384930067018779FC6EA8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DJ2TWQ.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DJ2TWQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-DJ2TWQ.lnk
- Size 1KB
- SHA256 c4f07677fe9abf4e54a2875bb751fd1f9d347b245d903d2e7748f210906c69f5
- MD5 4a181bd48c8189df6fbf2bd857a025b4
- SHA1 16526e1b794b8a3512be84a21f2b37e9ca58c46c
- SHA512 ecb3355939700c42057f887b54b965e49f7490cb87c9051f6e4cb7c90d521612d95fd3ccc0747bfc3b729e0adcd7d4125d31dd63af360404d45f912cfbebe9a6
- TLSH T1623197102EFD0628F3F39F7784BB571489BF79468D10C62E0140854C5032E01E6BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.