User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:25fde9480cf493c43163e911e323555de8421318ab3d5b054943812034b0743e
General
- Target 25fde9480cf493c43163e911e323555de8421318ab3d5b054943812034b0743e.zip
- Size 811B
- Sample260822-kysfwasgph
- SHA256 04134f2d714f533baa912bc1f118bf868d552dea54d7786a62c4010b81111600
- MD5 686f2c6d00768ba2864200ceac77ddc1
- SHA1 df10a49b1beb7e5bd69d5676e8d5fd81ea6dbad0
- SHA512 ba73776fb626d309f9fbfe77b9a4c6e436e9bdebe46b94ac90521d9cd96bbe1a1bd2b8aa4a34d081c19e7e94b1aabf244434750a81d80128408e5553213e03f8
- TLSH T189017AF36FA64576C7B107B0C5014F165486586013812556F4F4E7290CD26C927BFDC3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-U1XCCC.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-U1XCCC.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-U1XCCC.lnk
- Size 1KB
- SHA256 7225a71dc3253875193ba12748a14d57959756849ab1e1169a8aedce1dc64e75
- MD5 481a41e8c118d251634a338c4c9473b8
- SHA1 77218c34fcbc021cc1628d964de34db22410828b
- SHA512 57152a9a6e97f8737946228d0b56b7c5bd1d68d22ccfcaf41cdcd0441c1ba5ea2bfe605ce7ef024300d333560f53aa5801f7d17fd39b1a004f644c782cc74ab4
- TLSH T1E73197003EFC0628F3F3AF7280BB571089BBB9568E20CA1D0141860C1032A02E6BAF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.