User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:8fe00ea3bd654ebf161760d4f0a78680e7df79cfe12ab144eb93cb95ec6f494d
General
- Target 8fe00ea3bd654ebf161760d4f0a78680e7df79cfe12ab144eb93cb95ec6f494d.zip
- Size 806B
- Sample260821-lrrrfaxdnb
- SHA256 baa9c49a090a7b73fd4b2974366b6a565778aaa4d393a1aba541f40a7df03609
- MD5 95d74712f035b276dd57a8d9f6c9858f
- SHA1 b063e9ae1780448d3138d3f2312ba4477cf94b7e
- SHA512 9af89d342ce8c8b7ee100891adf4f089d265c65b1ea3c8d294b40f824f2d46050b38d0a74023bc76a0a15dfea5d431ed34b08456b314b19bb48e16eeb7c8d191
- TLSH T12A0141192F475B38C322B8B6B880A3132A2E4037CB4CC1E680B2D9357C423E16E1676A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AAFSZ9.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-AAFSZ9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-AAFSZ9.lnk
- Size 1KB
- SHA256 30b15055ed9b7f8bc2471e2cb2b25ebfa2975bb130e8f626f74567d74d72e0ce
- MD5 537c807912561e7c9c68f237f2118935
- SHA1 c27a122e58cfb9b421f143d87f83047b9ee333da
- SHA512 ef45d23f714c74b1c958ccaa1235cc2dce9bf3aa5e8ab92275df18e956ed283f97d282d336db561898ca69ded860ac605dab90e938fd665a584025e93b27199f
- TLSH T1A33147103EFD0664F3F3DFB684BB572489BBB8568E10CA2D4151854D1432A01EABBF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.