User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:f304508a88ac1ce3269c1569625ee03c1c7e2615f2f75d6b0164443d179edefb
General
- Target f304508a88ac1ce3269c1569625ee03c1c7e2615f2f75d6b0164443d179edefb.zip
- Size 803B
- Sample260822-1msv9scl2v
- SHA256 152cfab5175f0246edc5959281b4bff8406b8080f5b5c78bdfbe8b5f2b4b5e85
- MD5 6ca75c7fec142d19967a82cafe232c1e
- SHA1 a9e09a30d2f06dba28fe29c7e8515ed6d6b12a5b
- SHA512 4b87018a60d00f2b9d265fb860f7c0d6988cda9c3faa74725a4a1383897231050087a6b0590669bd0ac0213022fc2190ec653ecd9d31a0f44cfc7b8e1e0d79a5
- TLSH T1910186854330398BCA09C235426933869E28CC3019FED8820F22CC350DD7CBBC68E890
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EFK2X6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-EFK2X6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-EFK2X6.lnk
- Size 1KB
- SHA256 a2bdeee08cc1312d05e11abca0ce0ba71afa9fc9110ef74f9340bbb0542847b3
- MD5 1b5b13838e64ef433984860d9e3d1234
- SHA1 74de4a0ac7dfc7d8bcd496cc057db98ab1b5847f
- SHA512 063aecc76402ef6ded134795779d916e8d250383fc49e146e182c842c0485f52ddaab0d0e255d082caa6611c040853cc4ece51b8baad721372a7a73b751a2dc6
- TLSH T1AC3147503EFD0624F3F79F7684BB9B2489BBB8568D10C62D01408A4C9472A11EA7AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.