User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a443c8731f17f4f0d67d26cbcc01aedb24bbd40628dc3d0a4e34736a233c21a0
General
- Target a443c8731f17f4f0d67d26cbcc01aedb24bbd40628dc3d0a4e34736a233c21a0.zip
- Size 808B
- Sample260822-tcrf5awdkf
- SHA256 49566ba33fb5ce018ef0a6c030f370372a822f2e5bcabb3d23dd25b9f15dba0c
- MD5 e380c490b6c63fe90d2bc25e556e2ded
- SHA1 daf47c16d4144e0b96f87021cf73d73971e01c3e
- SHA512 02fadb35ff3b16f679a5a984e3945541e914055360ef05a3a1686540bbd3c11eaae79535d8e7ba4631c05f6495f27fd0c8e6b6c6d63cf976d2986a88c58c2209
- TLSH T1140141CB867F4D58E1570F31A52852A0AEC5298916499306B08E8E308C5C0CB1E730D3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-07JF4L.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-07JF4L.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-07JF4L.lnk
- Size 1KB
- SHA256 f23628625277921e3558f5238f91fb8305faa995d462de64750479528fd3a9f5
- MD5 101013e35ad86e111990ba89a5c5494c
- SHA1 c3f03b1ea610e3974e1e886f37e9522da4a72545
- SHA512 4c9a2905a55930fadc1642feda49e44f45e80bd36e77413846956f9c2b0825cb235c0f8ddc855f75488899d3ee85d06f5e37cc9646e9f8ae375d91fc10fac832
- TLSH T1593164102EF90628F3B79E7284BB57108ABBB8568D50CA1D0140864C1032A11E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.