User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:09f11b5a397bf7c1a415a1687e829e093824da1d90fc16764fbe072be86a58ff
General
- Target 09f11b5a397bf7c1a415a1687e829e093824da1d90fc16764fbe072be86a58ff.zip
- Size 798B
- Sample260822-fbtyzaeq9v
- SHA256 0b359a5f85b69bbf34de3a9630bbcf9efaf0810ef53d83d1e65752e4b1597330
- MD5 bda9e0a69369cc5c89d216717d788bf5
- SHA1 432dbff40b69327be4aea561f9dc968d98743db0
- SHA512 2749c3d6a8c8b5920a9777461f6fd5dab086dd1c3bdc5ba450de5906873245ea89b63f4dc83d5cd13681d46d2d7d17d0f33d6f8a788e7e293426ebb9ed94d9f4
- TLSH T1E201C5710AFE2205E5A6FA31CB075332DC78886257230D13C0BE94966F84A448C03DC9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-REL9OW.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-REL9OW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-REL9OW.lnk
- Size 1KB
- SHA256 034728f4259e0495f64dd529f64cf39061004d68fde90c2c922f26e77ebf60d7
- MD5 347478fc6f4d87f7d26c1330fc9eea84
- SHA1 c2d823af388c4ec7de29d36840b6fadea2b64e3a
- SHA512 b04c7969d05336f580ce34e7355a7660767e9c1728b9164d04b36a1035ae9f8f9f28f329f7ad5cb4b31b3ac2499a2be792de27e4eb7cfc646bc802adef8a7474
- TLSH T196317B507EFD0628F3F79FB694BB5B2489BFB9568D10C62D4140864C1032A01E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.