User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7d9d4eddebae11259c0f764ba3634c92aa64f4b902f30c1e29159a596ae2317b
General
- Target 7d9d4eddebae11259c0f764ba3634c92aa64f4b902f30c1e29159a596ae2317b.zip
- Size 808B
- Sample260822-s4wpgswckb
- SHA256 37f5f7704efd9093480f0e5399ce3ec7e7d9922a3bfac5b793b42da20dc7c6a7
- MD5 db2494f42580ec4e3d5ddde13ba8355f
- SHA1 4b249a24dc751bcd2b2d1d6c11383d8ed5c2acdb
- SHA512 a2084c47e3aec9f081cfcea5d66ff9a002b80049b9e7e9c8c7296dc0f514f1d3b892719cef4ad72a2f384fbc6e856d68c25a96000c5c4b56d021da9c6fa91c50
- TLSH T1600141E3C94761C8E88E047149C968E50DE818D4AB17A2C7F55167DB5BC5A0401F2600
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZS07M1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-ZS07M1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-ZS07M1.lnk
- Size 1KB
- SHA256 c6ff26e08302c8d2c2d82f1c67184a5ab3fd8bacaac0e52c59092db6bf64815c
- MD5 3e3ae6013cd63679a33fb60b076216fa
- SHA1 405e7005ef646800d8857cd8e55687d1c634ec29
- SHA512 b38675967b61f8700fcd4d16d8d2f87cb7ee9bde099cbaee580fcfcc2f355b8c1b20160ab5351ba341f3bd2e071403a2c0a8909c6c384a29152266f11b52e152
- TLSH T1423124107EF90A24F3F79E7784BB6B2099FBB9568E14C62D4150864C1072E01E67AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.