User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:258f54d3353a449f1bc56387ac538dfd541311ecadae95ff4f5258f2ec28cf56
General
- Target 258f54d3353a449f1bc56387ac538dfd541311ecadae95ff4f5258f2ec28cf56.zip
- Size 809B
- Sample260822-d23mpaen8z
- SHA256 753daa3836c35e14ccbdcc24994781e25522e79932b0d0866773ea20938c6bb6
- MD5 b4064bee18c156eaf6ae39ee17cdef6b
- SHA1 f407b2efff2742248350052f4b38c737675f5d3f
- SHA512 b09243eaa709cec905c237684828b95fff3a9ad5865a37004edf0c1f6f50fd6af085add4630d96af615fa359b17940416d814871eca9b1fc064eaa0c7cfc44b5
- TLSH T1FB017599352CA602E0E3907450D85E0D5B7271E34A68B2615C94CEC63CEA9AEAF5BE21
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OU2XDI.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-OU2XDI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-OU2XDI.lnk
- Size 1KB
- SHA256 4ddefbfd456a0b4391ff77b174b66bb923924ec02dfbeb02b28f43c154a182d2
- MD5 a9c00942d29caf71bc158cdb5d28cc77
- SHA1 fd2dc0f15755a198143657cf1dd5c15a18e852d2
- SHA512 44eacca70c168010fc0ab74a6bf0c19ff371964396c2b71a801056102667718531506ed4f2ac24c5c4a55a88de299c4ed1620124a5d36927ad944874ca5d088c
- TLSH T1143164007EFD0624F3B38E7794BB572089BBB8468D10CA1E0140860C1072A01E6BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.