User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:4440869fe9be4fb0f21ed9f85188305654e5d2b2206b65e78be8751e51d62dbe
General
- Target 4440869fe9be4fb0f21ed9f85188305654e5d2b2206b65e78be8751e51d62dbe.zip
- Size 808B
- Sample260822-za7cfstxew
- SHA256 97d8628735227da6b4f3d5915af03ce71830421655ae97387fb289560d4a09db
- MD5 43e27b712435e2f687900d635a50c325
- SHA1 aa86ea412c201301414364f75934c1f78ee75d47
- SHA512 00541c0d83183be316b53b55549a02fe6fc3e838c5e0ae58884336ea752444534d865583f6be01963de6071c7783e3f00abe17388c5095ee552b12de14f97520
- TLSH T156017A3444ED147DFBE907F643010A5E0301F60D4E43551A1699C69AD9C5BC50FA7F30
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-45HURN.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-45HURN.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-45HURN.lnk
- Size 1KB
- SHA256 04d5b61a548174125519d4b5c1802698dda72d8abd0b739684a578363b830edf
- MD5 6485e222b57e0b1f8a197da88e7fc0b5
- SHA1 394ecdceda14a4440452c7cb4b2a6562841d6e0b
- SHA512 f2e52a29f0e844c6f7891e04dfded2c2bbf77d274b1b707a04b95fe3e30aca7ece6f4562bb43ed9248e5f94fef3d63503737d6fc3f3c1117b78328c6b14e6ff5
- TLSH T18D3197003EFC0628F3B39FB288BB6B1489BBB9468D20C61E0150864C1032A11E67BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.