User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:80772e0abb51dd9cfbe11a965ac20418d0ee7b47cbb2056c192899543eee5d14
General
- Target 80772e0abb51dd9cfbe11a965ac20418d0ee7b47cbb2056c192899543eee5d14.zip
- Size 803B
- Sample260822-2d3vjszfkg
- SHA256 aff17f928ce05172bebb3a504154d84aece00b129d71fcc4cbf91144d046ce41
- MD5 9c78f732f7a507feaea053a137e8c8b0
- SHA1 f42343c1387ea097ceb920493cb463aab4d23136
- SHA512 b67461826abe201b5e6280378d3e4b9c1e7749d05dd93c7e6cd69b8b20c2833bf4011786df53d7d8df3ee979858a20d33b3ee36b3e65c665e7d9c02d5c438715
- TLSH T12C01413522FE0B96C16727FD6F6225548D81F4A5076B114E0802A0D26442F096A68A11
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TMGEG6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-TMGEG6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-TMGEG6.lnk
- Size 1KB
- SHA256 7b7ec64c51a29a84e84fa146d2167bb9bef2101afae854d8c52e02cab4be5c90
- MD5 2de70bea9ee2ed72f7b5494d644198f1
- SHA1 f301dda221a0153cb8b9f583ddbb29eb90192034
- SHA512 ef4fb76e91f7de8a425fc94d7d92fc4cdb81925670926fb6c6a47de841068d327dd81f662ab09e0c88806f7c669ea61b900c01d5b7f406690e3716cd738f144a
- TLSH T1DC3147103EFD0664F3F79F7684BB5B2489BFB8568D20C61D0141864C1472A12E6BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.