User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:68974f20f58288669482ed47324c02e541c0fd43600323662025c6084963cf87
General
- Target 68974f20f58288669482ed47324c02e541c0fd43600323662025c6084963cf87.zip
- Size 1KB
- Sample260822-tqq3hsweqd
- SHA256 d8e23728b5927bc3d697e41475e36408ceb716127f0934623c4dfc2cd02859e0
- MD5 4e54f15c017fd20b29e3a1a615486f66
- SHA1 5864353e30b1684817c0ae436d128769fd438813
- SHA512 19f3d63e48c31ed497e58256fbb8715fb71841ed2c660dd04b39b195f4d43c6d1ea6e58bc3238073e0025d6fca22ebdf834a2753832d9920ba77447ee22e6575
- TLSH T1041186B13E547898E21BD23B100FC99BD7C52874C69962D3210B63872D672C8CB8AAC5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-END6HD.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-END6HD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-END6HD.lnk
- Size 2KB
- SHA256 ba5b07ecbb95b08d816d24020a95f7e05d4aaeb04e37f2996889ffba3e16dc56
- MD5 869e6f6b91d686d1ae41fa7d25da3f10
- SHA1 8d4ac6f4ba75075c3167771bee49a823322ae365
- SHA512 d516a7db403d5cbb7f104081144e35ddc18282f930b3aa58c1ecbca0852d6e7f22ed5b0df0d5e6d610b042caddc3ee942d5bdd256802c68eeb7e3ac59dcc7321
- TLSH T1B54137602AE905E8F2FA8E76ECFA6710597BB9515D50C6CD0C50824C4832705D577B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.