User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c43c53d12979319fcc4776affe20ad42be35b48ead55125948319230c2eec95c
General
- Target c43c53d12979319fcc4776affe20ad42be35b48ead55125948319230c2eec95c.zip
- Size 809B
- Sample260822-3sdpms1bkg
- SHA256 b82f1c6e3a0bdf7362609953be980e10e6d440a039bd41f42dcc830ebb36f322
- MD5 a13635cb564dc320df90e9b04669b3d9
- SHA1 fa1e60456450c733bcc90ee59a980a826888a7ca
- SHA512 1c90834b73cb5f8887d31126dd94bb876de47efbd6c04880e531c5f38d1df36aa4c6525c8245cbc50a8e8425cab60f1b582ed731b04060ed35a280de3dfdf33b
- TLSH T1E401414C1F19C222FCD509380CE1C294A4CCBDE4169C7995CA8475D29C74FD7AF12C88
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H2D52N.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-H2D52N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-H2D52N.lnk
- Size 1KB
- SHA256 cca76d9f436c29cba26278381bd0c1fec89f8321624140064038c424851c0f03
- MD5 e172c87ce6b43d7367ac5bbc84b6caba
- SHA1 bc83fb1790f5d928c20146c41eb3e174527bf220
- SHA512 f38e45393401b623fd1fda8a9a75403e0a59502fe6914a04851b89eac4dc92953b6ccbed5dbb41c1c448e187d56432c53ceed21c912fd04ecf7c930739ee33d3
- TLSH T1153124103FFD0624F3B79FBA84BF5B2489BEBC568D10C62D4151894C5032A11E6BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.