User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:090aa3d2c4389888731bd8e17844c507d99d52c455a10a7b70e8e414b1fc6db4
General
- Target 090aa3d2c4389888731bd8e17844c507d99d52c455a10a7b70e8e414b1fc6db4.zip
- Size 817B
- Sample260822-ysf3jstwax
- SHA256 86f9fe43a77af346a38fc26e996e64098a233bd604f5d801a6a7f3275ff65fd7
- MD5 60fc52599fbb6a0d8bf4ecbe86504cd9
- SHA1 1faf21da6e4f3f021e57de2c12c4e4fd9dd1c44d
- SHA512 d476f1ada4c56887c1fcc41b3300295d4607194a09e2def8a44b52b91b3963855b540ade489685eae27262753942fffb5c560b124c1daff2e65cf62c95c03f90
- TLSH T1F101860160578792E5B76F35C1C9324A1FDF3093CC8F59682E0CF8145903C041A023F9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KR5J0P.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-KR5J0P.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-KR5J0P.lnk
- Size 1KB
- SHA256 3a9c1d9ced468f5762be88f82b5c3f5daa50b09b85fffb63a8b83b2ae90ecc7c
- MD5 3a43650210446421483220307f998ff9
- SHA1 de6fde90377c1ead706ccd8b5bf7a0658de4719c
- SHA512 102adde4c6a381808b7482fd0d78515a2137d98ac5fa13cb7d9dd2fda3d9fe542f3f98ff80056f38cfb7d4c5b4e9e7afcd41393cf629e38db460099f59084833
- TLSH T1EA3164102EFD0624F3B39EB284BB672089BE78668D11C62D02408A4C5032A01E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.