User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:bde70f813007ff5794e04a8cb5d8363774701c1f6db4e9460088b8e785acd219
General
- Target bde70f813007ff5794e04a8cb5d8363774701c1f6db4e9460088b8e785acd219.zip
- Size 801B
- Sample260821-hst2eaab78
- SHA256 7f8f7777d1af7058b76fb7201f7d013307cec696140b0c6c8a2e16bd7fc369b3
- MD5 285783cea3cdfc5b97f52b2f1d28feb4
- SHA1 6900be1ef232b83568247cc24278e1ff3b6f300c
- SHA512 a4836c645a0977701ca1c70fdef1301d0b31e9868631c7e800b5ed7aeb5a2b5e77293925a5d2fd3c2e073cf9bc23a79b4479aab494267a124ddd1a2dda656f5b
- TLSH T1430146B201955844D617F1F0589628023A7AD654ED6429C7DF0254F25885ED00746FBE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DTK4P4.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DTK4P4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-DTK4P4.lnk
- Size 1KB
- SHA256 38e7aac09649026d6123bb6cde2d17df88d72a8033465f27230450aadebee307
- MD5 8b66a7ad0de28a065f1c6781dc0b1e96
- SHA1 cc252810f2fcc38ce8289c97da9b1c39af708732
- SHA512 0b85ee0bddb3fe3b20ebd2785c36b7db677736a4b3ec60a83b93cee10797c0be7e6e850a01df1d8e965dc881236bb74fd748e0947e9d66bd0e9098db73436f51
- TLSH T1CB3147503EFD0624F3F79FB685BB571099BBB8568D10CA1D4141854D1432E01E6BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.