User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7de9cb0bbead8e13426745f483917be3955126ba0a2d686606f8cddd909bdcef
General
- Target 7de9cb0bbead8e13426745f483917be3955126ba0a2d686606f8cddd909bdcef.zip
- Size 1KB
- Sample260822-c8243avtdy
- SHA256 c4809885a3f64ce1438f5af165d81beb381cc7d0722a26f746c9b023e8267f35
- MD5 073ae03510068e52838fda21a73ebe79
- SHA1 fb32a25c93c62119457f66f459011f5a58c39bd8
- SHA512 7297f0dfc9c5a222a388b3e2993d42b0862d477d5149bf8222999e67fedd5a9a47a0dfef0c69f12da2ffd9e96ad955623afafade6fc26b3b7923b8ff05a8a762
- TLSH T1D021EA09DD8AC5BAE615F43465017075EF1003E9D988168517EB3501031EEF88DCED6E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M0DVN4.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-M0DVN4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-M0DVN4.lnk
- Size 2KB
- SHA256 05f7eb18e69f1524b5163a81c93e23b19ffc472b6077804847aac937c057f0e9
- MD5 5c429eaaa293b12bb10240ec3b72791f
- SHA1 ad6bc5bb238bdcbbaaca871e2a62ab943d6a614d
- SHA512 25b9cd974cf405582624850bfe14de0fc404bd50de6d2c9e708e9d8cc249c7b1cde35bb4ea048c5bad16ae64882661c79f5398b7fe2652038b2f46d96fa616e4
- TLSH T1E95154813AEC14A4F2BF5F36DDBE674049BBB8426D71C25D4880D10E1826F01EC72B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.