User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:d2baa7031e0a00d297a1786e5918b0f61e9fbaa015b199f978e8519b59ee9dfa
General
- Target d2baa7031e0a00d297a1786e5918b0f61e9fbaa015b199f978e8519b59ee9dfa.zip
- Size 804B
- Sample260821-pql2caem6s
- SHA256 f1bc53fb47a4a86892be5d16730b7ff6a6fd9c149d7c8027b74b4674f72a6496
- MD5 9560a3b99246fbfc4ee20e1910dcbb28
- SHA1 b5a9daa0d45ff793665c27aa663bba1802141d24
- SHA512 2564cfd49978d823362a794f856dafa09d2c2c5d365bdfa6d66e08f686258ff241b3f416942a4a5131ce656b823bc5702d7cddfb690b6aeb17e5aec4fd00212f
- TLSH T15A01410AAF6C5F02D41E85B8C6EE02D23A901CA006D778C2966CA46E2C33AF1656FD49
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KPM673.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-KPM673.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-KPM673.lnk
- Size 1KB
- SHA256 78b9cebe5bf956ca78a284cc674d5075b79f12434b3c4678c0e45db8a2fc3f68
- MD5 38d1f1a8858e7217c35f5c36670badf2
- SHA1 f394ec88eb5c9da8cbb3bcf86b003d06b6db2751
- SHA512 d4d31e4f0c46db1a165b1de005d4bab9acb27fd31eb81af6d4640d61e272204751e831f5e4ef71b40f997f9a3db2f85ce3dfdf51ab08e03ac1a2a3420254cf99
- TLSH T1543124107EF90628F3F79F7688BB9B2099BBB8568D20C61E4150854D5072A01E67AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.