User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:0ed32816296870988d78b9c928ee774e0beaa391575fa181fc8cc83948bc2c58
General
- Target 0ed32816296870988d78b9c928ee774e0beaa391575fa181fc8cc83948bc2c58.zip
- Size 1KB
- Sample260823-d5e1sshc25
- SHA256 c7775b6bf90c21cb89aea184ce1b1bd6d21ef63f9b38717eb26cf8cb68875819
- MD5 d4968a9c92bb00369c72781f7b15beb6
- SHA1 c3b18be89c86df298277466b84888d7441de3a2a
- SHA512 f5bd990d3714cd524f1e7069dad0f10813848a2bd282fa6b0cb8e9093e45496942a910013e8a4721466effbd07309090931aff9ea634717163f947f270b1c8db
- TLSH T14521E7EB9B126C20FC3A0E34C4E6404B7DD12136C480B86B095D0A112D0B9F3CACB5CA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A3L03Y.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-A3L03Y.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-A3L03Y.lnk
- Size 2KB
- SHA256 fadee67f2ac5fa5075debe7c7fa396fd2e1fa76d142730a69687f3f6f2b3c1e8
- MD5 2ce665cca6af6c470820665e2c923707
- SHA1 115870330b0d4606fb02855c51ddda2e52531d71
- SHA512 af77a3f900df079df2d00067211a44b72a4f5cdf82a113a072d798d8a4493a78605a2886ed0ad0d223450a9d867f956190ce8afca5aae75a7e939ef2bc553676
- TLSH T1825132902BF806D8F2FB8E36EDFE3751497BB9514DA1C68C0C11820E5831B41D9B6B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.