User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:86649073506d8aa5fe4d0a21030444e6328abc05ae0f0f81a3d72f73c337fa7a
General
- Target 86649073506d8aa5fe4d0a21030444e6328abc05ae0f0f81a3d72f73c337fa7a.zip
- Size 803B
- Sample260821-z47v3sdd67
- SHA256 becf597d1f970321071b9aeaa32b6351ca48c327d0c75bbcb99258d09e4137ea
- MD5 b3a14d9d9d746a8fdee08a470a668337
- SHA1 6b2d9ee9dc1bae904a43dc975da8361804719040
- SHA512 82b21178171e77f580b47d2eec0cb781a9c31407a01f58a469f78c2d345d20e9b61c60927bb5fb2461f9226c908fa154211025097212f9b8e054b11098fef498
- TLSH T14F017533FF79D303E0327472207803D8A8DD2DD5A510A4291F26D4709D0F7D0194B834
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LENL3N.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-LENL3N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-LENL3N.lnk
- Size 1KB
- SHA256 d729ae7a15f8072035f3bea935e3716f4178a8501aed0d0896dc0c14e609b846
- MD5 a9c9fa40b3353caa629c1fc6e1392865
- SHA1 751c843f76d90a620ce705d33de3fdbd6bf1ae54
- SHA512 45680e6b01b7712df5a1cded96d773a01b3faa84c4b52d5f68903120e8dbcc5458a74059e5fb65984e720c002f221dfde24cb97e184a569445e197547e261d56
- TLSH T1F73147103EFD0664F3B79F7694BB571489BBB8568D10CA1D4140864C5072A01E67AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.