User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a2925672def8fc66be56ff5510a521e09754e43b92da49dbd9c7234d2bfd4724
General
- Target a2925672def8fc66be56ff5510a521e09754e43b92da49dbd9c7234d2bfd4724.zip
- Size 1KB
- Sample260822-fnwcka1dle
- SHA256 7274ab9cbb4856f9d70e2b44e155317b1d43f6d68886078f3d682048e120caba
- MD5 13f57e5b008b4b20af5c2df085f2694e
- SHA1 b1c93df7b9918ef42e6dd6a657f0f41643183a71
- SHA512 d27cb1e6c43c1f5b2ec2dbdf056be65e3026538b5bd474bc3fc6f082b9634fb802d42b226238543ff89e07695784844f4908e7d31cf6cdefe01717159ee621cf
- TLSH T1231186540BDB6E3BE973E870C5401200BC8A536A4737768336B99854616D9CB00F25C3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UMRA54.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-UMRA54.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-UMRA54.lnk
- Size 2KB
- SHA256 622d12cc20773038f07fcce90e3de3ae77c25c411e99658c7e9a2306508911af
- MD5 c6d780c5a75be9d9a2c4ae9d4c1c5d30
- SHA1 a1703bcb2bd1dc677a5f365a4d05ebbed6514242
- SHA512 38f04098ed1ae7aa9f3d920a6af874de8a7c508198e71fc07a53952845eb292119369c7e49a58e9f672b7b763d0930a0138bb7f349c38eb8a9129e0938731f21
- TLSH T1D8416D803AE905ACF3BB8E36EDFF275088BBF8655D61C65D0940814D1821F05E8B7BA3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.