User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:e164d3e492049dd972389f2576a2d0d20311dc0f88654d7dff28737d921de1b7
General
- Target e164d3e492049dd972389f2576a2d0d20311dc0f88654d7dff28737d921de1b7.zip
- Size 1KB
- Sample260821-vac2dsteqd
- SHA256 820361f24ea456151d06a923fc5d4f7548b9e1af71e56744a4dcfa6904add7ad
- MD5 3fb0323e06709521b21107dde4a02fc5
- SHA1 6e7dfd2ccddf8e93c593b04641bf391faf6372a9
- SHA512 bb97c121b2c1631f7db72d00414583020080c57108874c8b6f824753e80aa45ff9fe7ce5120f60c43a6d9fc5c006310a96926dcc7db91b7b2cea135638141ade
- TLSH T15111BC911F146AFEDD45317204805E9D0725D5463D70FEDF5BBD5290813104F0ED3135
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KV5XIU.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-KV5XIU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-KV5XIU.lnk
- Size 2KB
- SHA256 86cf68738b5039c8828a672d9dbf67f03d9ca378864c3c8223451da02168a3f0
- MD5 233ab2755f17cc63c83eed0eae3b8c23
- SHA1 e217c4bcc5d9afc048fb27e6e807a418bc5723d0
- SHA512 cd528e34f460841827c2a15719f2db265861703a840c277096dbea755e3919fa75667d4f8a459f046eda889fa31d1dd3fe2f58b415f9e780f4af398952849b2e
- TLSH T17741458139ED02E9F3FF9E72DDBE2B51487BBD565D60C59D0800820C0422B01EA76B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.