User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:680168c904981dacca5f5235130e4ff22e69f97adf6410ff3bd88ddd3c94d9d1
General
- Target 680168c904981dacca5f5235130e4ff22e69f97adf6410ff3bd88ddd3c94d9d1.zip
- Size 801B
- Sample260822-eb5j2avwdv
- SHA256 17783f74d5edd91bc044d42ecd58da942c2d79ccb1ef3f2b9f73bf4dcddb2ece
- MD5 4e0a2f4794e413bce7ef11e3eda2d047
- SHA1 d2e8bf3a287728d36bb4230a5d14cd25b7d24e7d
- SHA512 f62f7dc9b02749560159bc21974971cc0324b88d81536775d225e11b0c969f6c7341ef4c33af003932ab93392dc3b5ca94f164856629c9c038e369542ed0884b
- TLSH T1DB0165C58F13A632ED526DB8880FA7A8B054498FAAD935C152CD789404ADBF30F41D78
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WN9UQ1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-WN9UQ1.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-WN9UQ1.lnk
- Size 1KB
- SHA256 2852a946bffce180f3848e8e0725495a80f3df335132fd60a8770216117f601f
- MD5 bdfdb9c9917e0acb00423202a0eec140
- SHA1 01278601ad5c44921508d3260c85786c6e798986
- SHA512 41e008630e22c88821d8e774958366467c500ce3c89fbfc42e49f2f2e9cab5b5fa49d29ada41b0cf97f0952d234605adfc9922bb421f2edc5e063a57ff644813
- TLSH T1663197403EFD0664F3B38F7685BB572089BFB8568E10C62D0140854D5532A15E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.