User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:0338ed2e882eb4b6a26345ab60efa30f0e8577e15403dffd6b006439b71286fe
General
- Target 0338ed2e882eb4b6a26345ab60efa30f0e8577e15403dffd6b006439b71286fe.zip
- Size 806B
- Sample260822-1m95jsvtdv
- SHA256 8e051d1c439323e8342ba969ec4ea85a9ccbc41e796a3b10abb95f89f1ec1edb
- MD5 3e9ee3df09118af592f5be1c2b74da50
- SHA1 0636d307a17b768cae04c9191ae435dcfd65483a
- SHA512 53eef80fb13ab1ab5bec784e74b16750962a96d9b9b0a0e9267513f7a8cb0075dc4bf9fc69bdf8377c5db81aab966c4d1cdc69eaffa58eda8feed5982b43dfb2
- TLSH T19801F10FE656FA47D6A60A30321E8891F0E397A139E7161BC00EF35A15E2FA74985551
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S5DO6A.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-S5DO6A.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-S5DO6A.lnk
- Size 1KB
- SHA256 b12542c34043ee1c9e96ddea1e88f20b4daa8f444f4cf28189d8357c1cda656e
- MD5 0a9bad4c9a1833cb342fff5d2abdca51
- SHA1 15b7e0f6b085372d8cedb09fe5c624ba667e3c41
- SHA512 d984d767129b527171648a67ed1851800183ee3b67d8558ce874db9ee34c084d41a64339c81d9fb2f10286dfec8ee8eff35949096ac5f8d99f3f0095564ecf85
- TLSH T1EC3124502EF90628F3F39F7685BB5B1089BBB8968D10C62D0151864C1072A11E67BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.