User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:4a6d45a15aafe789c9194862b1b6eebf7208b5673082036ea7034590d831fc32
General
- Target 4a6d45a15aafe789c9194862b1b6eebf7208b5673082036ea7034590d831fc32.zip
- Size 808B
- Sample260822-bp1apat1fx
- SHA256 94c7294f7769be41c3e98997e0f6b780104fcf308456a1f2f2053920e99f4d32
- MD5 b9e7a3ea4034a044f8374013bc6dd3f7
- SHA1 566f36e1ef3d8125542d31301be9c86cc0e911ab
- SHA512 1e0a0d97ec8247137f55b84b3c33956111896a34832fe3d0173808469ecf9689ca91f2829789dd597485e53dd0e552e1d7556e2f06a43dbd062ce543d2d3a8ba
- TLSH T14101750AB19634C1E942B270880D6B3C9F8C83DF85716DC5060344ED26B4FF1610E544
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6X1RCF.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-6X1RCF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-6X1RCF.lnk
- Size 1KB
- SHA256 85b63414a65ccd299ea6b9485a238e4d183b925b8770e668f9a2db720fced01a
- MD5 6dccb4eb36791102059c47b3e7bb6a6f
- SHA1 7300a1aa811395881ed1a57c57bc41071c59acb5
- SHA512 9b675d07eb0891fc90adb2d526238e2f58be3e29eb38590b382d5637516c78bab255af8900d2224c5c060c97cb5694af0fb14e09f9b85f26cd8c40f57620662e
- TLSH T1993197103EFD0628F3F39F7381BB5B1499BBB8568D10C62D0141864D1432A06E67AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.