User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:dcec5260fd950a97fc40f1d37f00ccd5fe6a7c765da420a01ea5fd39c4eba73c
General
- Target dcec5260fd950a97fc40f1d37f00ccd5fe6a7c765da420a01ea5fd39c4eba73c.zip
- Size 806B
- Sample260822-bd7wdsel8s
- SHA256 b3c3862aba15ec3b65585efe87fc74a400426bbb40e3d104ac27f20548e8ed8d
- MD5 1ec4f32829a37c222e4c80d8fdf41e61
- SHA1 a1555412ba45072fcb29cab0c537b346bb976816
- SHA512 169d7dc9bca829241687e554532e240d2da1d452e270853c632c740da5ed88bb36eeb66ea03165bbaec40f88302fcf338defbb29ce5586fae3551016d43003cb
- TLSH T18A012039E9817E73C00B46316544F3C38E7CA6A64615B65182326CA52F789D939CFEEC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WURFO8.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-WURFO8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-WURFO8.lnk
- Size 1KB
- SHA256 5671e9e7c931b6efdbb77914f53f3fd85683cfe7388c4edc7545d103fe02e10e
- MD5 552113692f2e68590f74a38f116fda8f
- SHA1 355d571232348ef71d6705f3ec9b6c12267351f9
- SHA512 db7eef9cc49132e4a19eaf69eea62a9fcb3234130e1b07f627c3722e92a699a986e4332c8005988f5e46251db8f8a398d7d1160693ce5a76d72dc45a88897701
- TLSH T1FE3147103EFD0624F3F39F7684BB572089BFB8568E11CA1D0150864D1072A05E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.