User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:468ecc7b9b5e50f2ed3a54209ec1f77849854a95c60835ac045fb38144d9a746
General
- Target 468ecc7b9b5e50f2ed3a54209ec1f77849854a95c60835ac045fb38144d9a746.zip
- Size 808B
- Sample260821-nltpystsdx
- SHA256 c63d7f7c2bf10c567ba1d6f9eed991a63cf301cf2442d6d20b77d7dd2530b893
- MD5 b53aad532962c2ff1685d47857e90c68
- SHA1 577e230a72b9cb3e0d419ad9a57840df695a70d6
- SHA512 f6539f1b15d6dd3b2e54688798530d10ee21f124a4adb7bb4ba1d80fbe62d07897992eb979c9a01de00dc0c96a6aa3cf3740cdeb7e8cd011b71f14c31dbde7a5
- TLSH T14E017AD507950342D06515B17ED1411177E45D0BABC3A410491CB2EF1D8FEE44BC3314
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CFQWRV.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-CFQWRV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-CFQWRV.lnk
- Size 1KB
- SHA256 e2cb0ab592d0b49f13b1f682586ba4ef0aa6bfc41f3c7f1a2154ebf1151c9f53
- MD5 fe712b328327dbb5d4ac8dee6840e9ba
- SHA1 057747f29ece73f97eb393907ab9fad9148c7aac
- SHA512 9649eff587159cd47357228fcc81a194477e307c82a9b1283573b8324664f1aa77d05fe1408ff358e66d0411d902a0aa510db3a2bf6be119036828dd79c443bb
- TLSH T1363164002EFD0628F3B38E7298BF572089BAB8968D20CA1D4140858C1432A05E6BAF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.