User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a807f1cbafd494ab0e4838b3cde16af706f723aa97ffb76b84f7faa967a63fcd
General
- Target a807f1cbafd494ab0e4838b3cde16af706f723aa97ffb76b84f7faa967a63fcd.zip
- Size 798B
- Sample260823-bef43awvb1
- SHA256 ecee5d3f1fab4f0c7c7e5d29686a8c497f3fa1c1dcfa9be260578b3683599b0a
- MD5 066f9bf0fd1ee5b15785d5f16a465f6d
- SHA1 4607e558f32012165bc2a751b61bf599e9f8771a
- SHA512 7e1698114f0bac4034c0adb424d5308b9acc597e2161d0bbfc008defd9336ac4e0066e1b8e7ca47c67335ac7ef7d0185211b6b729b44aa901c09f815ce699998
- TLSH T1AB014188F27E9008E420EB78C81AB160CF455AC115A3DEF10404F62A0C52684AFCEE53
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RN1JKS.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-RN1JKS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-RN1JKS.lnk
- Size 1KB
- SHA256 fc9366a84dc1f29f0c531e45950abf9f87a3a5bb1b54480f7e35ca4a964a90fd
- MD5 f00ed96c1cf128193fb1152070fa1124
- SHA1 e13543ac8b60e760b72e1240a4599f29c8b5add8
- SHA512 88eb84afde485187727c50323567e60cc8178f9811dbed9ec37331401ea14e49935935215f2a9c157b655e1e4bb299ea40c2cf5af8217cc7ed3d29b22d19ca31
- TLSH T19F3192003EFC0624F3B39F7684BB5B2099BBB8568D20C62D0140864C1032A01E27BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.