User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:82de331e6aadcb3bea12cc15d8cc4eb0552fb00592ce9dc56b413f512b32c245
General
- Target 82de331e6aadcb3bea12cc15d8cc4eb0552fb00592ce9dc56b413f512b32c245.zip
- Size 799B
- Sample260822-vnhtss1yft
- SHA256 6381db2819e0c0b6796e81529982be89425a6279b2a9a5fa59a35b92fed57107
- MD5 242215968b6155c7aa8d05eaee47bdcf
- SHA1 e8836c8a87c693ac9729d55213e0415713a01dbf
- SHA512 86cb1021c0e8fec4c423f0e72ec6f356185c1b206f3e813fa3141805fcd1e819f4d0982cba2a9e0567149df6a0b92385a8da91fd958f9ccee3af93526a7a095c
- TLSH T15701255647271E2DE89C90F0C6549E09BAB020D35E81B7A9444B1CDC9590E585A88A64
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y8M12S.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Y8M12S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-Y8M12S.lnk
- Size 1KB
- SHA256 773e0fd329db55bfaa73ae3969097144aeb28363e076200d4512ca9f16f30761
- MD5 c7a6e807ff3060422481128a9d0e13bb
- SHA1 f032c82be6573a3ff7d83856f0475d1edb266db7
- SHA512 62e6cc130636aceff73792662d5223f069ab4eb9264de32003b6e101683972e76a5110395bb7bd1c94a58a51b8d4d9e3a04f4f1d0797afecc590d744a3f4aada
- TLSH T1193147503EFD0664F3B79F7685BB5B2089BBB8668D11C62D0141854C1432A11E67AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.