User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:03f9d3437dc4c5a6f6c1896f30d2d60028851fcb3f1b883551282e6544f6498c
General
- Target 03f9d3437dc4c5a6f6c1896f30d2d60028851fcb3f1b883551282e6544f6498c.zip
- Size 802B
- Sample260821-l2sfqack71
- SHA256 5c231ee303dddb1aa8adcd9ef10a99e912347c3f7a957e6e1e40f34d21357836
- MD5 f2570917587c14d5ff198e8554fcabd6
- SHA1 f63eab7500e426913c43526db5316390e1acdaf5
- SHA512 1da45b2422df19f4c4a4b94b851383123993876d712f5e79ec11daf291bb72521af0f39edaad7f623737167f0bb8a551a88314fba6350182170e6183541aa825
- TLSH T1C401751F68479122D00A68F250F10263F0381CDB521FA2CD98573BF9DA4BE983155275
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZWHQUG.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-ZWHQUG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-ZWHQUG.lnk
- Size 1KB
- SHA256 2f8ad85bcd3c7117fdd8378dd3b0025bbc88f9c8e10e835812292ebc046d4350
- MD5 58091f286f5974e5124124c5c0d02d08
- SHA1 9af2b15584ca700e7d6f3988940da86963d63fc2
- SHA512 9c73a094f0d0f5440ba2c1556eacd3915e6c862e40c353a47efd4be84f99b5c3f1ce58c918409775cd1d9b427314eb226d7ec7117c0d70aefed0de740851e115
- TLSH T1F93197403EFD0624F3F38F7684BB5B1089BB78568D10C61D0140854C5432A01E67AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.