User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:43545d920f3bedce3ea2556382fc55a6c335152d436dd5ab4ffac7094c7e4ae8
General
- Target 43545d920f3bedce3ea2556382fc55a6c335152d436dd5ab4ffac7094c7e4ae8.zip
- Size 804B
- Sample260821-lbpbda1xbt
- SHA256 0b7a7102707c3fe52f916d9e667ab1025bc3e9d55113a0ea4bf3415cec75e42b
- MD5 97fc5699c417da2cf9a681a5f84421a7
- SHA1 0b72ac841851ba6428010ea0866270e7ab5e92da
- SHA512 659820992afb62055d23c29bc0a817ea983897c34462ad872597880c91db0d05f8dfafb56d06d12cc6e5998d6beb8935a0e4e63c159dddc1b3eb3b31628d8ea1
- TLSH T16B01B5280FD0EB10ED660830425178082CA49FBB33BBAFFD86869CB40D59D097195AD0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XLMQNL.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-XLMQNL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-XLMQNL.lnk
- Size 1KB
- SHA256 7b1d97c30b2b5a928d95d1820083f125ea49f9c9754fdbad5f7144620bb18cdb
- MD5 1040bdf93e558ca773553d8e5574d61e
- SHA1 12409cd2e95d0c3a2ed2452ce17d92ea2f5794db
- SHA512 2d9e441f56aed7f733e359e1afb44809ea9d3fce724732cc06d006b0f32eee16d3a9ad6da76d35da233da07ddf3494101bb299c7fe85257f9b805ff9ed2c2064
- TLSH T1CA3147107EFD0668F3F79F7685BB571089BBB8568E10CA1D4141864C1072A01E67AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.