User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:0dc7fc3201d9a63da26b66b24b0bc9cde75277bed31f04382968259ad5f15bd9
General
- Target 0dc7fc3201d9a63da26b66b24b0bc9cde75277bed31f04382968259ad5f15bd9.zip
- Size 1KB
- Sample260823-d424yasdnc
- SHA256 f251c9cd3210d2f27789bb2e5294552a4e3e13e185df4986b0fabf567425b48c
- MD5 2130efd71954c236a6e2cf7234fce7ab
- SHA1 137ffc60a5afc01d6b5ae71a28cfe0b621f326fb
- SHA512 695cab99057bea47e5dc5db5e4dbef0474f1afd8d5fec537ff3818a361835951646e9fdc5d9c0e8b5771cb3a4250561380605d29ff4ded81ff378826f3509733
- TLSH T15911D8D9E2FE0B5DEDC0ACF56205B5194A1201D409E291FE201040926CB016F5BC283F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UAFSQ3.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-UAFSQ3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-UAFSQ3.lnk
- Size 2KB
- SHA256 4f80cf817f56b5a84821feef95138dfd18db1dda1152d32b8535c668dc08f3fc
- MD5 ba38bf8fa53d1b5b54fbbe44686f2173
- SHA1 245cd0540d62db9787a1d84cd73492fbaad2fa05
- SHA512 4e87a64275445e69ac2f5ac692cbab226814b2264e3a8a962f23161cd5ba77ea2202243b1e95f8bf1d6d7500eafd477e0c29c7c17d389e153b57e29c22474a84
- TLSH T192418B413EEE11D4F2BF8E76E8FB275049BBB8525D50C68C0550810D2423B02DEB7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.