User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:22f1d0eaee680ea6544cfec422b15e16d2d1fdac5d346db7df2bfd9a35f58c48
General
- Target 22f1d0eaee680ea6544cfec422b15e16d2d1fdac5d346db7df2bfd9a35f58c48.zip
- Size 799B
- Sample260822-t25eaawfnc
- SHA256 a860cd6cbe7e58bf8a0449e29a861cc80345db5219c50d595b133d70c23b7e01
- MD5 54520aa2fcdf91eb46df308be22f277d
- SHA1 c29670f537d156ee9b275431ba57754d99828244
- SHA512 5c046e05f6c7994fd87db4bfd7ed616d41796d8f6ea75815e01f375c6966b9e08a2832984fc8d2ce5b978d0b6102a51bb5831fd4b8edf346ef01286cd5c9d6a1
- TLSH T190017518D0860E2BE5B0CE70004EC75C2B5C83640A83ACDEC84DD9A73541AF6BD2DE44
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-P13WLE.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-P13WLE.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-P13WLE.lnk
- Size 1KB
- SHA256 e5cdd03c02e18891e2ae9875cfb76f0daae17b18157fb7d07e318977f5a33c48
- MD5 d5904126dd768813cd454a86352e0f7b
- SHA1 3edbc4919d0a5b640d4baa4ad39548bb13b23cdf
- SHA512 f5994d6b40f1851849cc4dd76d0ec5cf06d2ddc17c26a7d4e7f4c95211ae77bd75250c0b1d5628014ab725b6485bb9b5263407265395e5967445c4b1226f6bbb
- TLSH T1513147103FFD0664F3F39F7684BB571489BBB8968D20C61D0140864C5072A01E67AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.