User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:07901ec62fa2ec7e06a71bce63e3e19cd1d2ee34282dc5e6e9c3ad8ad6b174d2
General
- Target 07901ec62fa2ec7e06a71bce63e3e19cd1d2ee34282dc5e6e9c3ad8ad6b174d2.zip
- Size 1KB
- Sample260821-rr5k7asake
- SHA256 4b531d5ff8cda6086c5d241ebb14214b5f856d5e7471a4388ad435476a141cf4
- MD5 1fef38e82571accc05b7090eaf928146
- SHA1 6b9a6bf7bc334681359e54d3cc12e03b6a4cf2d9
- SHA512 13991a2b2a91f1c0685b45e342e4bd92474e03255d3bd34589d9a1ff391b84edc67574ebfe5b550b77740dd44acd857df3b1b5bc286094fa0f5b6580d2fcfd3e
- TLSH T16A1186066E4EBE78FFC2D970A066708371960502060A564BD904DA9A9819D820D7FCBE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AJXE32.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-AJXE32.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-AJXE32.lnk
- Size 2KB
- SHA256 bf5c6ce8cd873fce557d1685907d6b8df453585fc3097f3f19c2fcc29785ba3d
- MD5 a005c394023c03d7c96cb30a615f5ccd
- SHA1 c7df8bd486fc64a3f119c5328c7f42860f25ccdc
- SHA512 2cb346eca40001b41ceaf7b3f08252f90c16a1c19493b9ebfb8413fa68001e38b384eb87fc8da877ea2a8291569f15ade19692f49814b8edd11f3e32b3864edc
- TLSH T13A4175502AF901E8F3FB8E72E8BA2B1549BB7C565E20C69D0450820E1932B01DA33B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.