User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:5fd2f342cb05a5fa0c629c1468a60af9cd9b7e343daca793628544ffdbf42986
General
- Target 5fd2f342cb05a5fa0c629c1468a60af9cd9b7e343daca793628544ffdbf42986.zip
- Size 808B
- Sample260822-feey8a1cqa
- SHA256 dd45753857554b99f6874306a1aeb7752eecf49f6a3024d9335d4bb82cdece72
- MD5 7c21017562edb8e7c2af50def412abed
- SHA1 9220d197b0e8a988c0df154a9d7bea72f4eefba2
- SHA512 78cef7dc7f1d3011f5d6654f515490e246ea1477aef7151268f23bad6707a6396df9fd3568db4005dbf4ca37a281097de0337ed898384d940ad741c5ab32aea5
- TLSH T11001757319F709A7C12FC43695884A5436431BB38CD0428D5C9EEBF139A2AD1E986B96
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DYP6G5.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-DYP6G5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-DYP6G5.lnk
- Size 1KB
- SHA256 96003f3d7d5c37c1110496a71dcdd9d7e136895f0e5901ac6aaa78a3029210e7
- MD5 755c5f1fba43ccc1089ffe1de8850c76
- SHA1 5165be8043da517917528ce644ae168f24735025
- SHA512 54ff0173bdb92972d0bcd51abbdd3ffbd145cc24a526959d18b19b0c9770b266676d95cbe50acee981de71ed77d81c3ef546ae671b5a4744eaecec26885ee669
- TLSH T1BC3124506EFD0A24F3F39E7784BB572489BFB8568E10CA2D41418A4C1472A11E67AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.