User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:d8f2f1afaad66645676eb84a6c5cddc2bc11a7d66c893b4cc41d5e54e3c8cd53
General
- Target d8f2f1afaad66645676eb84a6c5cddc2bc11a7d66c893b4cc41d5e54e3c8cd53.zip
- Size 810B
- Sample260821-hs5sxavdrd
- SHA256 cfa46ea22e3073f1cf770fbf1d8ebe9431ff6c04498c5622f576299f7e58e1fe
- MD5 248e0085b40e9cebbadcbc95cd6b4c60
- SHA1 c9d37d0dd6562b5ed2cc185d6b6862d32dff4e78
- SHA512 ccbd73877434fceeb978163ebbbac066e6e9f7b0cf16a0bdf77ee90ebba0e2a86498ea534ae71e5dee296f63dff8efacfcd2d65bd7b20e51b43b6c0d02ca0358
- TLSH T1E501F1D54B2421D5C00511FFD20AE58DD6ED11CA0D19560F4652759A3E2D6F19E4F9C8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y6BUWN.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Y6BUWN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-Y6BUWN.lnk
- Size 1KB
- SHA256 6912ced165de1e1e4e2e65d91b6cefa6be54f2334e3db83984762a105802f1c5
- MD5 a90b109c6833f2dfde35a8a57e3aae51
- SHA1 1615291e3b5ab6469be9b1ad82c9a6a7995381b3
- SHA512 06f2ae44e4a0cd23c60eb1b19eb72e1a4f62051937b1fe17ffc7029e8b2c1fcd2f916965f307e9a39f04539618128fbf3eb13becef4e4edf72012bf956c673fc
- TLSH T1F13124102EFD0A24F3B3AE7684BB571089BBB8568D11CA1E0141864D5432E01E6BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.