User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:743347ac838dd6a704260ef80c8888a40bae3a9758029ca47a1d9a3da6dae767
General
- Target 743347ac838dd6a704260ef80c8888a40bae3a9758029ca47a1d9a3da6dae767.zip
- Size 802B
- Sample260822-elasea1blc
- SHA256 d95fde3bc18488e12dce23455b778120b6b285bbd5093f8c8b68b838acbb3646
- MD5 c7231011405167438d4b7aea75f0d08f
- SHA1 47a5f0f4864d3895309f1da9d5ec1bb62f1aee46
- SHA512 1fc0456c0c6a98b13bb3b61c6dd51b1c5bc715b8716334e05f223dd9166648185ea87cba060bfa26046c941f9adc7aa2395a926590ca5d6419b6f9cf5eb6d0fb
- TLSH T1630170A335800A36FCD2A9701BB5602248D9852B09BE40A6EC2AF4F10522DF4F6270AC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NLE9S6.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-NLE9S6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-NLE9S6.lnk
- Size 1KB
- SHA256 703b2c146c272bc646a902f3846dde98254863f078088c3bfe42c58f366f70f4
- MD5 1daea7588586dfaf5398a9f449e1ee3c
- SHA1 4ec055c636c67ea46422b70fb235b4dc39ba5614
- SHA512 0d256772459bbddb37b7f9feaf0450896bbe273a33855ed290d0c13270909894d6acfb6d68a3878ed502f4b6f74c40c671bbaf292e6a5239d42c89318e682e5a
- TLSH T13C3170203EFD0554F3F79F76847F671089BB79568D10C61D0140854C1432A01E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.