User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7cec048f3e2932444edeba3703e88135e7b24b51f0c0084101d8ff48cf0cbddb
General
- Target 7cec048f3e2932444edeba3703e88135e7b24b51f0c0084101d8ff48cf0cbddb.zip
- Size 810B
- Sample260823-e56zysej8y
- SHA256 0b86a709371a378f8353c8829c13ae9d66ba46845e467ee6b6ecfea22bd1dc24
- MD5 fd1355f596723d86c30487cf7499e3ed
- SHA1 0aebe13d0705ecf49ffcb18797bb6240278c8569
- SHA512 ed6814842d847f50aa60389df8bff2c9f0128ff963f9cb67d50e07d7342f1df7b6363f8045bf4b850774171412e89d3b6a8d565796cac05564c87940908baed1
- TLSH T1A60141254B20061CE90BA3362480D715921194B82BE57CA9DCE5D2230C49DF659D6751
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5W5SM8.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-5W5SM8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-5W5SM8.lnk
- Size 1KB
- SHA256 49d5d7592e66c2d31a5889478574c314b4ddaa3f4d45090210d3ebd5575f5649
- MD5 8981bfe100df04b36ca4b7d2a36c4c07
- SHA1 9474a54406709511f76883dd2b4c339af45eca37
- SHA512 e8e282fb4e8cab95f6ab02d24a1afcd62f02d01c5a9269b64e7ea67d16efc24186f2986a175b9abc16090ec4efb9d08b4f3d05841d887bf2b2be8bac242f70d6
- TLSH T1C83164002EFC0624F3B79F7286BB67108DBAB88A8D10C61D0150864C1072E01EA7AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.