User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:8bc3fe66fa3d1dd65abe17df424e2a6b7b797f45ab8408501fad2d7238cf55ed
General
- Target 8bc3fe66fa3d1dd65abe17df424e2a6b7b797f45ab8408501fad2d7238cf55ed.zip
- Size 807B
- Sample260822-zvmhsayhpc
- SHA256 7183a344a296954c31ff34c9ef994b0471613f334f85b8088be92e6d9c7a8800
- MD5 746c436cec11ea28cfd244799614fcde
- SHA1 24b42a6a6b7413e33c1d87db8ae6abc370ddbb2b
- SHA512 536e3ca0e0820063c7e333151d9348f516187fc8a1ee5ba5434b69113ff50c02d687e3a2a6b2b97ec191c82ea06c1fff3741e22bcd73e7e5bb3795232beb1ab1
- TLSH T1280146D7D0FE1687E633AC355382224C8187599A3F28B0074604D1F49254EC916C7735
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-I06CZB.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-I06CZB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-I06CZB.lnk
- Size 1KB
- SHA256 39f0b2968a5380d0108951bb7029d237f6d6bf164eb00b0f28e9abbf6eb2df41
- MD5 e5579cdbe981148af6762bbd5d26ba73
- SHA1 5f7c8554cf2408135d9fba31d7c918f5e6e801f9
- SHA512 3c5aa403fe6369adf833f425f542e2be6e5b7be260b5c59843e3cb5498dbdfefc8063cedd56fcedbe5872607421d73dae3876b157c08e563e1ccda50626a12cd
- TLSH T1723164503EFC0624F3F39F7284BB5B1089BF78468D21C62E0140854E1032A05EA7AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.