User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:83c8e3b1e65236e00a5419788c6f5d7d36cabbe4a6e9b2b6a05b9ca24f26bd82
General
- Target 83c8e3b1e65236e00a5419788c6f5d7d36cabbe4a6e9b2b6a05b9ca24f26bd82.zip
- Size 803B
- Sample260822-j84ffsfp7t
- SHA256 be8d5ca4858e3874b824755d63249527fc25326a4247bf8ed5cdba28671e37c8
- MD5 3b5dfa78b334fbc7a5d3b656dff80fa9
- SHA1 0a4d78618c1e73451a1a43921905a7ecb796b598
- SHA512 e331957f262c8efb656f406c255d5aa3053251063af501970bdc93e7031c6395c557906f46e9f4d94f83198642e7e7182b521acc8f33ce82899aa06a42b59928
- TLSH T1AC012555164C8911C41FB63843F052C36BD8827D4FD8F18D9F6E4A551C52FC83E7D215
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LNCKRP.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-LNCKRP.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-LNCKRP.lnk
- Size 1KB
- SHA256 bda69a16c2d1b609b509b6ca5caabc8644ca30422113a4a036eb92046b028830
- MD5 4eea9c4186cdf108a97f766cb2292105
- SHA1 fefca18b6de51cc24d466ba5d33a5f8659296ee3
- SHA512 2f6915f8e85fc22e4782372a899f4484320ae4361f07542b83bf3b7a14e4d958f228b5f7993f1f90c57a76c383e6c5caf1f29ca7b2e89206b29255460dba75db
- TLSH T1083124106EF90668F3B79F7684BB5B2089BBB8568D10C61D4240854D5872A01E67AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.