User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:903dd32cbbb4f1093d99f1958906d14d2f1ac744814fa7355b23581d039dca33
General
- Target 903dd32cbbb4f1093d99f1958906d14d2f1ac744814fa7355b23581d039dca33.zip
- Size 813B
- Sample260822-w8ajlaszfw
- SHA256 4dc14ae65ff1238fa01d91c48a7fdba8d6bbf3d63cfd12dfea80a6d310019a54
- MD5 b70edbcc2ccb2e021bb3733fefa7dee7
- SHA1 ba8d7868a87ff380b72da0d5947c873f5d996c19
- SHA512 dfb9ba6832287ce3c52c94d15a5e07c91ef90498246bdf3f81d4572dc4b3114e50d4e350d450530cf8458a13824283bd2fd898bc71f31c00721602f5338ebf84
- TLSH T1A60141258B4920CBFC0C5DF24827DF6B74D161058AA1C88A24F4ACAA8600FD82E87B98
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FMHNR3.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-FMHNR3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-FMHNR3.lnk
- Size 1KB
- SHA256 448a77d4bdc88f9a2394e4b7f914dffb83b3829b41a6cbfb6699e98bff658af5
- MD5 0dbda04df368d256de0a3f8574e44c09
- SHA1 c7a251500f3ef755a023833e80385a936f0a0a48
- SHA512 a75c5772aaa9487d8e1bd087613322408ee2e921ba85c789e5158b5cf0821bebfbb35b931407d53d488ea60a3ae6551da51fecf78c0e7f33ddd7dc00891020a4
- TLSH T1473124106EF90664F3B79F7694BB6B2099BEB9568D10CA1D0141864C1032A05E67AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.