User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:938e7d2a370af484a87c80582167e3421ff5a72b97bb1ce888d51d18dc602c08
General
- Target 938e7d2a370af484a87c80582167e3421ff5a72b97bb1ce888d51d18dc602c08.zip
- Size 805B
- Sample260823-bd4hzawvbv
- SHA256 8f3a74739712d95a0a3455a64810c8789cd14d9f02ecc4cfe8bc0c99f2d3945d
- MD5 953074ac60cf7e308900b9eee8335182
- SHA1 3317c0ee74c8377651753bd2723d6b2263289e4b
- SHA512 5d1fd7fbe1c2d3445e401c7b09ba4a12e09819e74f8be045126e1f9f18c4a5d99473fe33734479cfcdb133a76df17d25ba1db484635aa18e5c500988aac2123b
- TLSH T1AA0141809B249AB0F26616392923A244530A007F5EB213AA12A6B9E0861BAB01F13831
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4DS80Y.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-4DS80Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-4DS80Y.lnk
- Size 1KB
- SHA256 6d28091a2d2b6ba93b0c7081214011a063cc7cb4633ba801b96dc1b1130d5eba
- MD5 4b6a78bd2acdc565f7bac3d8b891a955
- SHA1 1200f687abbd9dfec3606b52f26677d7d6623deb
- SHA512 ada08de9a0cf9585032c73d346af7dad7c731d92a24bf20510efbab9600aabe0dbf885b2a2f8cd22a1ae9e862ea824f26201165ddb0493f67a202020fc7fba09
- TLSH T1513164003EF90A28F3F39F7684BB5B1489BB78668D14CA1D4140864D1432A01E6BBF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.