User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:e9ce2676f708127bb163af25007db549d79b2e07664b2b8d8dd08d25f1848f25
General
- Target e9ce2676f708127bb163af25007db549d79b2e07664b2b8d8dd08d25f1848f25.zip
- Size 809B
- Sample260821-wb3twacf38
- SHA256 a46fe293cf5353e60cc1774322c7ff9c95a8b1690aea57754bd59800d5486710
- MD5 2d96f8ab3138b2f5fac731c1c87187fc
- SHA1 66692d154b01546ea2bd362a15d98c8cef4a34d3
- SHA512 ac2e838c65eff2a2efabebdd3e4a486b52433e9b8ea1de1e7ddda0ad1d576d3be1d8bf2ca64fcab09ace288d30ebd1c5dcd0151510cccc4cdf9055d4b4c2dd05
- TLSH T1790175451B10A3CCD1E66576D0241531DC83E6621AD418859E0E312A4A19CEBBF154AC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-T8YESO.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-T8YESO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-T8YESO.lnk
- Size 1KB
- SHA256 30e51453c5c0cd0a2a4669743458eacdbe6ac60827b155453183953b93db6294
- MD5 9a95e92b73c1aa36bfb8cca3b716a30b
- SHA1 0d0f4daa543a4c719c4dc2229c577af07c8fc31b
- SHA512 0c0ba8d7406eb9bbd2e5381ec261ecad7b50aba756df77a726e48049ae28922b8ac62543627eea876366bfc20dbf30dc6c0479f0d0ade97f967f427f217f51e5
- TLSH T18C3147103EFD0624F3B39F7784BB5B1089BFB8568D20CA2D0140864C5032A11E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.