User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:17161ed0719c72d5842f46869a623b3177ed9272e0f1dde6603142fc35861410
General
- Target 17161ed0719c72d5842f46869a623b3177ed9272e0f1dde6603142fc35861410.zip
- Size 807B
- Sample260821-k264fa1vb1
- SHA256 63c741772ee30f3f47fc5217d3e35f137c03adf4827c7dd468d76f4b5fd655cd
- MD5 7ae138154b12c7a06785f937dfc9c68a
- SHA1 d8689b2980364a722f64c78cf851d696807174b4
- SHA512 9d0710581c6502d0d85b838315ff672e22ca792307e1a029e2c1e796a13857e659cfec91a68baa0a68de2060b00a285276be2f73a6c7e63e5691f169795a0589
- TLSH T1340175452B0E2655C4A71A7D5BB9464B3D0068F44EC4D08F13120AE07051F142BFB839
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y2H4RD.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Y2H4RD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-Y2H4RD.lnk
- Size 1KB
- SHA256 8e66ccd5933400e5bafe62d876611982a26fbe57b31ea2d916bb26aef1d66b5b
- MD5 cc028ffa3934af7292e67787d68018d1
- SHA1 ace739549ff5da900efb1e873a86507b76b87f64
- SHA512 8511c8e7493ad849edb13d5e5b7d089aeaed873e1533694036d6e98dbd9989fed85835240ace0ea7590e7c38295dee6f73d1fc87eb978296c43c85be73efe500
- TLSH T13F314C503FFD0514F3B79F7784BB572499BB79958D10C62D0141464D1432A01E5BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.