User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:f80d476cb2151911ad67141d9db3750f38ec69ca761c294abada31b13553cde5
General
- Target f80d476cb2151911ad67141d9db3750f38ec69ca761c294abada31b13553cde5.zip
- Size 798B
- Sample260822-ysa7asbq5w
- SHA256 da94cd302c4c714f76a25522c86e2d72ebb77a0ee70ddb745caf15fbbfe472a8
- MD5 d6b04659dffbdcfb283709b6d3e99d61
- SHA1 e666e92fffccd93b130f73955c6961383aafcceb
- SHA512 c5df3b4d18843948e10f901ffa2b8a6f64552577eeb5a6208ae573cb9cbfb8f64199c6ca8f53754c8d1414935097d180751cd73c7d6617d5f03d3c94cfc366b4
- TLSH T15201415457DC0D72F057B27301705DC83C2322891B2B48AF2DC8CB66E574E84864A097
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VRQH0N.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-VRQH0N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-VRQH0N.lnk
- Size 1KB
- SHA256 6cb4725d5f5bb4e33a8e6480770fc415042b70a460e29eb66b9f65bfa94c2542
- MD5 985a13d916a929fe87e9ea79c0280275
- SHA1 c5ef0ecbc684cc39f83613a47268a6fcc9639b6a
- SHA512 9a7da42682d4b54705e0f9e2b4ccd00694384f847845babc0c5e632957223ba6fbea6d1b165d540b6fd3cffe704492264b913823a0aef2ae8a5a0a012a6cbeca
- TLSH T1EF3147103EFD0624F3B39F7684BB671089BBB8568D20CA2D0150864D1032A01E67BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.