User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:35364f572c14dbbc9150eaab257c40efa133627eeaa4843d2a07f7073b666910
General
- Target 35364f572c14dbbc9150eaab257c40efa133627eeaa4843d2a07f7073b666910.zip
- Size 809B
- Sample260821-nc2zzadj9v
- SHA256 8f6e0f7ac35505e5d4240fc11e0feb3a3675a1def643f20b2d194fbf8ddbde0b
- MD5 051f0ccc8f3fa837bb02bfc85014f1e1
- SHA1 9182e7b74c03b3f1f89e21e155ca73fc875937bd
- SHA512 bb6a9f51928f782ea5daed8567197866244e0cf16eced94ff4d66071a4aeefdcc991d940d29ba5e685db1b0bc5ac5165ff10fd31fae8352c56325ad6fc81304e
- TLSH T15B014130B738E75CC34610FF8DA087266FAF69544044309A49C4E3204A087F2DECB9E8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CN6AMD.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-CN6AMD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-CN6AMD.lnk
- Size 1KB
- SHA256 6bdfe8790a4fd04583a36fec5b52f843f4b89c4048ccf5a00bdc6177e82b60f3
- MD5 b1c8a1d8ae3f16105668ebd161af8ae7
- SHA1 e7b8a6c1401ffb795718955677a9b6a6814e9750
- SHA512 c7b2f724fa4aa014bd60880c1cdb454c1e56e17ca80543cd6567acfe86bd82ad849ff2e695d09cfee0ecf4b962fe8674c8d2ff9450a5145797481ad5cbe17977
- TLSH T1EB3164503EFD0625F3B38F7285BFAB1089BBBC968D24C62D0140864C5032A05E27AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.