User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:190e7f70bf71ab55b2e34535e8888f8103626ccf37f90de13935698928d65b26
General
- Target 190e7f70bf71ab55b2e34535e8888f8103626ccf37f90de13935698928d65b26.zip
- Size 812B
- Sample260821-gz7emsaa75
- SHA256 dc16459fadaef47a20993ed8d2be716f8674e070644923e7e4280a14f738e4c9
- MD5 2bd334e84ef8a903d5b442950983c234
- SHA1 168a011689bc76a5cc9f4ca9195e8b46456e008b
- SHA512 de5c76b1aa8345f2253bd33c509b36755331c18e44467d4681447229a13c80df9c511ee4136226e0099ae2942f88156437c893381572664078099de6f7fcef10
- TLSH T1970141B2B50C5F07D0D7AA7906B655FD99A9102A7E9CF1ED3CF0028A84CDE900A551A1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-K3NX6J.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-K3NX6J.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-K3NX6J.lnk
- Size 1KB
- SHA256 81d311878083d79eb858feb49d440c4f0dce1b634d0a796da0d58eef2bfadc6c
- MD5 c25c123a96706119034a1e83508f74a6
- SHA1 26755989f35f1661aa2585ca58e895a5f13dd3e5
- SHA512 45ba7aea56b1ce73081b3b69489e0c5154cd61ba0f77694c7d037204f83ae17b72b99cbeaf81e3c501ee8fdade028be3d5525e2a016739ccd6040d0cfddac870
- TLSH T11D3147103EFD0628F3B39F7684BB5B2489BFB8568D20C61E4140864C5432A01E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.