User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:ad67901d974d63027bb155c92fa729798f8764c6b62b20c6cb0e2eaec2114361
General
- Target ad67901d974d63027bb155c92fa729798f8764c6b62b20c6cb0e2eaec2114361.zip
- Size 810B
- Sample260822-trl5yswera
- SHA256 8e8333b522e935fb8f466b5009c7ddd4dbd855d0265b113cf4e8b662fe403332
- MD5 2df63bf9418f161758efa4fe3bc737cc
- SHA1 ebfb65b2269bd2e8338d3291d0184154a2b83737
- SHA512 adf8b26560cc26eb4ee78ef51eedeee803d7e6021f9d2c0eb4c60697e9f7234f4d87b1642d84871a98d5905ae5837a7f498c05e8b036c3515057117ad8bc628e
- TLSH T1680141266B01A8A1C63A48370E2D3D455EA482D08A82A6E744723739194A6EB7C93C18
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SKAIF4.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-SKAIF4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-SKAIF4.lnk
- Size 1KB
- SHA256 138e268d9a50ed848b2d0ccfb5ae706760a791ee577133fef3e2abf5ce11a42b
- MD5 5cce0dd06cc53682aa0fcfa7ea53f061
- SHA1 f83d561a2acd4bc32a700ff00ed96e1eeb6adcc5
- SHA512 8548dd61bd2c6ae05c835052b879d541b7d1cf3b8f41742d325fbd8f38d0999966ee688349c4cc6d9f0e07b4937af161f84aee1aafcdb31a3cfd049667d2fffd
- TLSH T1F33197103EFD0628F3F38F7280BB6B1089BBB9568E14CA1D0151864C1032A01E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.