User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a4cfdce7bf9d0321bbef9ce19679b59fc545ffbfb42c54ab0112abcfb87cc570
General
- Target a4cfdce7bf9d0321bbef9ce19679b59fc545ffbfb42c54ab0112abcfb87cc570.zip
- Size 808B
- Sample260822-tq96dshr2y
- SHA256 7a519551e18634ee31d650d82c08802a2706c4df268046262a1910039956d18f
- MD5 f4488c738c51876b912b66d70e70f32e
- SHA1 3fab5ffee4f4122a61ed00b088c8dcc41325288f
- SHA512 b3a0cae2f92db2008df8ec34a8d5ffd1b007ee67202661121ec12fc2ca1b3d76e599da54d52a6c2a1651eb9aa09b3e5972e183213fb30537c63056bf9157ce0a
- TLSH T1C001753FC1473E1DD0545C3543DF0BE19A382274D525F95E6F448A4BA90EC403F24857
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9D2RSB.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-9D2RSB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-9D2RSB.lnk
- Size 1KB
- SHA256 b4d337d71e58e281dc240dd1f921ad4c17ccc4f28569ea95a81a0b5f1ae055d4
- MD5 32750ace577bf65c43cdca194e8e7e23
- SHA1 65652bb11f3188fcad8602731e1b14598552e243
- SHA512 037027e2156a32938784d6d720e2ed5f4c20c3b059c738e625c075f98344f5394fad62ae8eeb83441e0241023cb6c5c1271325d797b40c504913867968263e07
- TLSH T1FD3147503FFD0664F3F39FB694BB572489BBB8568E10CA1D4151864C1072A01E6BAF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.