User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:9b209abab5794060f6b926d1403614ec3e4fca6c43b2b357acaea550ee71d954
General
- Target 9b209abab5794060f6b926d1403614ec3e4fca6c43b2b357acaea550ee71d954.zip
- Size 1KB
- Sample260823-cnyk5sha86
- SHA256 1bf02044f37311d2fb186e1640311889bdb7f007385e9944b4865ad26aae0a79
- MD5 098d8f704f918498283f11b0d5b81a93
- SHA1 7fbb9170b694292baff84212eeb724bd33b1f445
- SHA512 cfcfbdc016ed4036cb47fa2ebdc3439c1650a06a6aaf18f1636888a1914dadb1d952adda327cef726b74510236fcf0aa5c1e01ae2a5e298fa8b6243ccdac65f7
- TLSH T11821C66C89E20F68D052A8729C104418F270F9F36E24CF5FA900A59C91186E6F7747E0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-U15RYP.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-U15RYP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-U15RYP.lnk
- Size 2KB
- SHA256 ccfac5151b9f30824d10e44b0ceb7d17543dff49424b544cb6e243dfa3965abe
- MD5 cdeb7e904b8e458ec60a4adfc20dd40e
- SHA1 df0dbdc9b85da8f789b5f580d486291b85bf33d9
- SHA512 66d0bd1f2f94b0a9a94bd69212c0c6d1b70f311fb4fb2e585485124bbd6be6248bf49e4806020fd398bd793ce4111bdae2499ddb5692b8aafed8c227069bde70
- TLSH T1D84144902AFA0198F2BB4F7699BE2712887BBDA15D70C99E0850924D5422F00D8B7F73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.