User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:eed7229073901f88f0a0da2f9ec7d3d44528191da6563225a8b096dbca5a76cf
General
- Target eed7229073901f88f0a0da2f9ec7d3d44528191da6563225a8b096dbca5a76cf.zip
- Size 810B
- Sample260822-1mrcfacl2t
- SHA256 fca851876117cbf7df38c8dc1e797795a1272d32f3c7b69897142a64188bce07
- MD5 b7ec31364285dd3ad4cd553ca0f6d7bc
- SHA1 c8e9324cf200f75d3ca4d0916d5b4f3c300dad88
- SHA512 ff4e56b4a31c117197d1bb18fa50ff3cf0e9ef759d4cbb1d190e5a73b6a92b0a64aeab05be00d6b464cb8ffb37ad1836c3de9b9cda2bc9f3181d805104b9ef19
- TLSH T180014649402D6551F947073248D075089F0E52416A9F5742B3C954484EEADA587F45F1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HEU3X7.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-HEU3X7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-HEU3X7.lnk
- Size 1KB
- SHA256 979baae1bd3155b760e2e458f5c2baa80102981fde8ae75f2a6f51146fea57f2
- MD5 2e19dc400926a8a00153f01dd7a72b46
- SHA1 89ebb47f3aad3c7199735273ab5607c77a1cf2e3
- SHA512 12c2d3f3b477ed64ac216a333def363d1da190dcb558839a2f26d4e120fe75406ff919146cc5154ff98de4783713a40745c50a131453ce140d13879aa766cd31
- TLSH T1F4319C103EFE0518F3B39F7384BB6B1089BFB8558D20C61D0151464D1032E01E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.