User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:1d5f7f7b703e9af828cf34e10debc72231357fff247e38536cd5ea68433008ab
General
- Target 1d5f7f7b703e9af828cf34e10debc72231357fff247e38536cd5ea68433008ab.zip
- Size 800B
- Sample260823-aa77bagg79
- SHA256 c1379f4c236059018e2c4db59bf36314f8e70aeeeb8496fc3f952367272add68
- MD5 c31aabd51a96ac9d82ab8728ad54e14c
- SHA1 b0c00571be9bbb1a8848607462dff4a63963f5b2
- SHA512 19f1fe7a0917513fb78ca1ed1c869a646f45250dfc73cf72c0f61f9606c3af7a2087b1649be17827e86e1cd7fd10c6d80d781572c07b6d7fcfac68ac349ac77f
- TLSH T18701419295278E6ACC4288FB6B4193004E1F016C4E67823D3C2F68D50F60DCCBABBA25
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4QUCEB.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-4QUCEB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-4QUCEB.lnk
- Size 1KB
- SHA256 343fa32c2072244c25be0fa6d451ffc531e46d73a9b8fa9ff3bde87d3c92a7e8
- MD5 cdc183b81d80c1960fc68f3007c46583
- SHA1 af10d9077a46b2f53e5f017bad8a18e0ad43f9ad
- SHA512 df8f37941821894165d644e1a54e551648df0c4f065ee12bf08e876939884fce4c078953de1a92660f0e87d6e40e99f88fe96ed0f3f8ca5b7131a50d52d4581b
- TLSH T1C8314C103EFD0518F3F39FB6847B671489BB78568E10C66D4151454D1032A05E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.