User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:235f2a470bc27db1e769d34be5bb05e38ae8f093324e8ed1836c73289c9523e4
General
- Target 235f2a470bc27db1e769d34be5bb05e38ae8f093324e8ed1836c73289c9523e4.zip
- Size 801B
- Sample260822-gf77tsv1ex
- SHA256 4c8206eb92ed0ff6b40ac91d368e4752d968e4a60aad3498b1da4adede737309
- MD5 f15ec45f5d12507703df99d2e08c1ce8
- SHA1 ec3326cf148dd22384ec812cd6a5652f161b0ac5
- SHA512 7d0fafce3bab5576b1bd4bb888f6f9d5c7ec40e8ad9028992a5ecbd227c01989b76f1de8c74aad1a26f25a20d66134031570d4a9ad4c54e6df67e12935d395bd
- TLSH T1A20141004F384EC9E745DBF57116DEC954C0B2993D15E52A624441E84D23CDE3F55CA7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SLNLE5.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-SLNLE5.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-SLNLE5.lnk
- Size 1KB
- SHA256 635dd405b4270632622d27e403a7309ae9049cfca45e65dc52753527c00c4d09
- MD5 4382907018a66ed4dc041e6a53e3c572
- SHA1 2a4f3eaa541687de7539f5949173754809491f24
- SHA512 93232c8bd8e4a398c77c562caf218f780940d552756a2e220ca995c0ecf3000bd97f2a596c0bc95cdf69d667d91ee870f5dcee51c86b3f878db4063f05e96a75
- TLSH T1273147103EFD0624F3B79F7784BB6B1089BBBD568D20C62D0151864D5032A11E67AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.