User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:82712ccc1b3705d68a1b512165369184512ba6d6c0f0a56ed358db2086b83c9b
General
- Target 82712ccc1b3705d68a1b512165369184512ba6d6c0f0a56ed358db2086b83c9b.zip
- Size 814B
- Sample260821-t4ddkshk7s
- SHA256 c26f2d1842021ccb65941cacafe069e931727a6f12ba0b5b7f2a85b2f1b322b2
- MD5 bde076edc25cf70f68eca37365434ae5
- SHA1 95671589dac0d6993ed5ece5e3030fab8a6fbe6d
- SHA512 ca23e0720a3f9ab421dd536d059d422b7777eab6ed11fb9b3695647d0455372446e5bb376b99447f50f510ef2406f23d688c9d0f416ea8b8a67e324b40a036ca
- TLSH T1BF014100592C1E22D99817F264B22B695C65C5222ACB3ECDCB7A68388472FC59D75534
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X5IJ8W.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-X5IJ8W.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-X5IJ8W.lnk
- Size 1KB
- SHA256 f9a434b5b943fed6ad3162120d54824a2a9859315776bacc50bed18ba6ff414b
- MD5 4efacf978ec522654cee1b99f94b9864
- SHA1 2dce754a59c5f9539504ab9d95ddc5ae98d697c2
- SHA512 8e64466c634e2d755ad909bc5b4a63729a03901bd129f153824b10f05b163b03374d1be0892cf6faa46f3737f47b19927cc43cf59f86c42ee18a39c131080645
- TLSH T1113124502EFD0628F3B39E7784BB5B1089BEB8568D20CA2E41418A4C5072A01E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.