User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:162f3015d1733ea31a15cd315c2225fba7d4364dc7639d8e5cf0a963aabef598
General
- Target 162f3015d1733ea31a15cd315c2225fba7d4364dc7639d8e5cf0a963aabef598.zip
- Size 1KB
- Sample260822-kppzdssglc
- SHA256 c15b0ca582bd6d68d8b1a969629ba998fdb93538fe902e316a64bcb147591631
- MD5 04a2ca2982bc79cb0d385dd248d1cb4f
- SHA1 a425f3869bf913d1cb4bd45f60654d3d8a9614df
- SHA512 11d7081ef5808ec304a309f21f53634b0f96d8a5aff662f4fec1b8ea500125a51669d45b4c83ff98ec208e5dc9335f1443936fdd85dbbdbc020f24ccaddf4730
- TLSH T18921B778DA7D9F00D93DBDB5E4F24706020A37D9940A2B6A81C90CF74601AD15E1EC7F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LXHYHB.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-LXHYHB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-LXHYHB.lnk
- Size 2KB
- SHA256 27fd209ee8cbb9211fefa45db344d4768fde9dc8b07eadc4ea3d15e8750b8a5d
- MD5 91d2e8269347983fa6f119c900430629
- SHA1 8996014bfd85f0cab072e5dc758917ff534dc612
- SHA512 50afe9df5976fe5006b9db87dcf7f03a0310521688a1d8fd8bb46ed2e904b02e8e76ee17cc8c64bca71902c8e2c5e7a91b75a46b859bfdcd703ba185bf309299
- TLSH T1165148806AF941A8F2FB8E32EDBA6B51497BBE666D20C54D0850814D1876B01D976B33
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.