User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:69bbfc30b626e6b02b867238915be0458ba8383286281a858fe95fc1aea86539
General
- Target 69bbfc30b626e6b02b867238915be0458ba8383286281a858fe95fc1aea86539.zip
- Size 798B
- Sample260821-garb5atfjd
- SHA256 59b9bd63896881da4c1a4ebfdc416e2d1eb93f60b6e24d37e273d623fa6bda43
- MD5 d1d62409a57e205883094847e3ac37ff
- SHA1 6a9ac465db26d4995e4fddddf4080ed8f6a555e1
- SHA512 a0750dc009893b7785c42c8d43e5f8855f5e5c340d99a75d4efd517c1e8beeb5a2a3acc2ddd27c0d55c29ab2bf3f6d00137bd0d669b4bb4eefbdb34044c997e4
- TLSH T1E70141460CC9B402F7132B380686854815ACC9F15268967F9A3D1CA9DF23FF028369D6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JZFBAW.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-JZFBAW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-JZFBAW.lnk
- Size 1KB
- SHA256 9d8169f5489820190b0d1611adcd4bf3fced90f09e22e7a2b019965321aa3565
- MD5 e3e865dd07546ca1a7ebd20c1c42cf0d
- SHA1 94aae42c7620603e064381c953842d837950d0be
- SHA512 953f4483ce7f1359c1a0480b1002140175519aa1d58b9a6f696492282812e462c0ef82a7f5885fd571409cc72a68dbad00377e312c88e926e2493be564adf016
- TLSH T1703124103EF90624F3F39EB685BB572089BAB8968D11CA1D4141894D1032A11E6BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.