User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:306809c7d17c8bf14563d8154f04a04af9325b84f034381f56df704b467cdabc
General
- Target 306809c7d17c8bf14563d8154f04a04af9325b84f034381f56df704b467cdabc.zip
- Size 804B
- Sample260822-d27lmsen81
- SHA256 433f2b81d5d187c8696195c7bd9018116b43695cbef04fb86d15e0795f0dc688
- MD5 a85fa767ffe226c6d879fc48ce1d4e05
- SHA1 6dc0169b5618cff76e638b4ca2d96d5f8fd03788
- SHA512 4131981f922e0d06f9aad48686227e9193dfbd452f430cbe2e94d49d454084b883ecfce941165f3e48c25e6fe227af1d0e8547a55e7e8fb650feacdca8185bc9
- TLSH T1A00175691D090A55F76957B63005FA0D93639BBFCF0B770A7B4C87102541F8168CE121
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HK692T.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-HK692T.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-HK692T.lnk
- Size 1KB
- SHA256 05a9d4fdc8a439553b28acece4b2199387d765fda3192e65b68a9a11939be057
- MD5 d16e60b293705e1c2a7f7516af600283
- SHA1 4aaa9fcb4b3ab431d6e46f6cd0d0439a7a3bf4ca
- SHA512 e58c42373302e3d11319d8433930e0f7e95da6c0cc3429920ef60f8fdff417ac26bd90d947aea22eece3f3ed302b80cc6ff94dea698879b2694cb5df6d6e0a01
- TLSH T1C53128502FFD0514F3F39E7684BB572449BBB8558D51C62E4140454C5132E11E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.