User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:8bcafe23700a5d340d35cfc5b3947e648bbe294dc617650160e88d29f0b8bc2a
General
- Target 8bcafe23700a5d340d35cfc5b3947e648bbe294dc617650160e88d29f0b8bc2a.zip
- Size 804B
- Sample260821-mt2j4aba23
- SHA256 d77ecd8b636756d9f85d1e8bac997b7aa27c8c48dee557946ca7acfc910d337c
- MD5 b1ad39dab312ebc33d48f176bf07ca9f
- SHA1 27bb5e4cbf4e26a74eca40676f32402875ccf1bc
- SHA512 71c2b88b7af312595486a470383d4c7c876993baed3ba13297bbb97cbc3f8ff23d0d90cf784d89982093ff19c0cc4f8a1db8ee8a2d9ee51e0272a185ce811d9b
- TLSH T1B20175A008743299DA2FBC7EF44BD668336B36BF9F803711F91625B80D695450B01CC1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DRVCF8.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DRVCF8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-DRVCF8.lnk
- Size 1KB
- SHA256 51b1697620d744c36caf60b93dac65b82dbb74f274fcc79f524f39998c48399c
- MD5 184206180e020a054eaf9c074d9d6118
- SHA1 82603cfaeb5b6c9589eb5f6ab2f73c82fa6f70a6
- SHA512 273b56bb7406c76aaf228e2c9078bb14390ff19622b41984bfb71a121b7cf329e0f2dcbb68473ecc5cef3ac0a1f73535754ff954bfd6e5da3f78dee67e18964a
- TLSH T16C3197003EFC0624F3B39F7294BB57148ABB78468D20C62E0140854D1032E01E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.