User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3e94c8c2a4fcf0becb9fb88f7328d342c67a3f2b9ee90990ecd2aa43ec2e7fc0
General
- Target 3e94c8c2a4fcf0becb9fb88f7328d342c67a3f2b9ee90990ecd2aa43ec2e7fc0.zip
- Size 808B
- Sample260822-d3fjjs1ake
- SHA256 b5239f3cb88da03cac6afe9af6e35b0412e5cee087d471c30ee5c5bc24e7d77a
- MD5 ee0bde9e78d46147129ff86356a2f292
- SHA1 68d4c8b7d6d577c3ad780ecead5ebc0e6c6ff6f4
- SHA512 f0193df58326f48b9939fb9093c5c5d6322e82bb71dc3214a757a1866466e925cf2f0b190f467354e1918c37d1ed890c3cbc904dccb8487ec66bb30b56420ab9
- TLSH T1940175500A9D000BEB1B7A34A2471AA39C2E11AA2BE02D3B50CBED7316DA552D6CFD70
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-B7AVBD.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-B7AVBD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-B7AVBD.lnk
- Size 1KB
- SHA256 bc279a111eb2a22d1b3612f5e4aa8d1896fefb65785982b08b1ded347285aebc
- MD5 3d52408bcbc186b49c23835d78d4b7e6
- SHA1 3616669a60ae17e0b3123c48797e54d4d05f3773
- SHA512 5f47f07d14de58aabc2d8d83c601514995a999e8183fd818c2f76e55cfd67a5a5de84ef49885e8ddef8bb720f624888047044cae5d17919b07b266ba6f9d64a3
- TLSH T1753197006EFD0624F3F79F7784BB5B1089BBB8668D20C61E0150864D1072A11E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.