User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:0f31e82495d65220a3593cd2c1e38558a77b6e818ca05d80112df6ef63a15381
General
- Target 0f31e82495d65220a3593cd2c1e38558a77b6e818ca05d80112df6ef63a15381.zip
- Size 1KB
- Sample260821-grv2mshh78
- SHA256 bb7d9a5b7e0318374fe1f002e4475de2b4bb8f810aa6180eafa7bb28c5e41c27
- MD5 ab9b32b3b9708bc6cc1103556c794490
- SHA1 4dbbd2b3701b7fe7326846682ca1622b15fe4978
- SHA512 6a60493bb87869ff1b78a09d76fcaa86cb0e363d7f38920d0e8202005004edfb10367af9f066a5cba32f078f4f2415d0c626440fabcd7fe943ed0b031d70f474
- TLSH T183118675E3671E82DF0A473C9DE60D5D17E166C51977E57B022878A50C528423E4286E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JYEA0E.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-JYEA0E.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-JYEA0E.lnk
- Size 2KB
- SHA256 a597c0e6379d712b1a57e1b5718cc00015e97c561c22fc6ed1256a9a218ff527
- MD5 d6eaf6601e1e5f83048dd69a67be75ee
- SHA1 7ed0a463b565d24e5930b54f3c8ee876d8c2424f
- SHA512 4079f5146fe7e31758d97847739d41a640cb0659144cdac48245020a918e302057014f5bb24f37df3d118e701dce15dec2d75546807cbca525b1fd4e064580d2
- TLSH T1D741904139EC05D8F27BAE72DDFE5B5149BBB5626D71C54D0C80C24C1822B01EA77B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.