User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:5c0a4d1b46c7cc66669c373c77509d8dadff198f8af5efa8a4478f894b73d3c3
General
- Target 5c0a4d1b46c7cc66669c373c77509d8dadff198f8af5efa8a4478f894b73d3c3.zip
- Size 805B
- Sample260822-jajndssdjc
- SHA256 66cc71fd005a851d82f43035142b588061e1ff184e6ced58391b8767bd74d9b6
- MD5 be9736621ae4107faa17465a0e2dca0b
- SHA1 f76f0f6ebed8982cbc1010b721be69d60ab79b9a
- SHA512 491dd9c69927d2ab2de345a8c44a60736b26a69ab1a79e4fa8d007fbe50a4e1e26669402f740cd084ea6c34ceded8443a017699964bab10c3ad9f0cc12ee9007
- TLSH T1D9014D45A91C46C6F02206312E886730C28369C4832B0833A10D67B508A3FD6EAC3EB6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V1RTUI.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-V1RTUI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-V1RTUI.lnk
- Size 1KB
- SHA256 32297e1b6ba6a75f0d3fe8b06fe0745595fa750556a2820e1cbc6e6f6c2e0e89
- MD5 e638dab6703b90beaccb56f6c3677c16
- SHA1 af6cf2197f31e7c2e501d6573f2ef7b01948713d
- SHA512 c38963e671e7a83a16ef20692a9b50aac0a3aa9e1119cb8ac0f1425cad7b8ebe54c67e0f3791ae813ece3921bf7b4fe9f10c18d9ba7e7bed3a4cc55b9d7b5831
- TLSH T1523164402FF90624F3F39F7284BB5B2089BA784A8E15C61D0140854C5432A01E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.