User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:f097e5fd053c77b5b2d6fda2512b6e5cee0191ac556a058bdc95371ba02fdac4
General
- Target f097e5fd053c77b5b2d6fda2512b6e5cee0191ac556a058bdc95371ba02fdac4.zip
- Size 806B
- Sample260821-vdf78atfnc
- SHA256 acbf50e97f07e47ac08a2e2dd603d48966f98c29ca8f55ded49287b24a0863c6
- MD5 db335065200dda6beb2525efbaaaa9c0
- SHA1 1a03acf658ea601e6754ce26ee1b29030cf66702
- SHA512 3e45f7de7730ab6a87be0765d61fca4dbba3a806cdf6c797430c24a92eac5bd898f61b94d9742798b6eaf3077cc67e90cf304d1fa433564d9794c17665e660bb
- TLSH T152014111CADD2397DE178C3D5A9A2BF3E59E01209B811AC4A2144DB9ED388C1C409C40
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XVB96K.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-XVB96K.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-XVB96K.lnk
- Size 1KB
- SHA256 ce710b5fcda1024c0b757e6d92d6b1b21e3312ec04b50e8917a013ceff9e224a
- MD5 ed1911af6b4d9f8f8d31cf2261b9e464
- SHA1 d87f8b678aaa8666478ac0a7b409fa409cbf2096
- SHA512 b8bffc815b1a18787594babb407adbe1e7065c5b00305ee6964ef7357302019760e7786419229e0a9ae23fe1d6a40513e223fe349b1a96d990810be201a57b96
- TLSH T1273124106EFD0624F3B79F7685BB572089BAB9568D10C61D01508A4D5432A01E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.