User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7ea91c3a0bd86f4f5853d7fe78bd11f3c1c208a591175023a889ce4173e13e1a
General
- Target 7ea91c3a0bd86f4f5853d7fe78bd11f3c1c208a591175023a889ce4173e13e1a.zip
- Size 799B
- Sample260822-2d11yszfkf
- SHA256 f35e99cc060feb3c5a8490f168367c9469e6ffa6e38ad6907c8175f6bd19b6f2
- MD5 46db0f8667308edde0151b020c72782f
- SHA1 d38698454667f806c508dfe13032b4f5918348c9
- SHA512 9b7e08f2d0f52d7d6ab108f7da4c2f615f50891a889988f9287c2b647b7e21aafa49e1a4d5063e691feceba503aef43663b1b01f554c1e74baeb059cffb72393
- TLSH T12401258A425E7E9DD2071B3107D9A27C3D65E680CE14D68A218834A345C1DA60FE7F52
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EFLZ2R.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-EFLZ2R.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-EFLZ2R.lnk
- Size 1KB
- SHA256 3b7005dcbbcbac1b506b1383413a279c2d1598626f0cc03981e3a6aa5a42c2a9
- MD5 1d820cb312eee69295bcd6a2b937171a
- SHA1 fb8b52fe0d8ead6d388bb6c4c90a6c89dff8448a
- SHA512 a24fbabd48cc59f3be84af463952cdb0c530713eb31748d49ffc6ed62fd114db4397f22b9ea96f4d922381bdc96c48e9a0320095c3a92bda419985266bda6429
- TLSH T14B317B503EFD0664F3F39F7684BB5B2489BBB8968D10C61D0140864C5032A05E6FBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.