User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a8cbf9455b2c636a6d6c4e1c0966800b19bce2add6397b79e5e4a847030ad306
General
- Target a8cbf9455b2c636a6d6c4e1c0966800b19bce2add6397b79e5e4a847030ad306.zip
- Size 1KB
- Sample260823-e71kyssgja
- SHA256 73593852eaffe563435b999a2a365ce7e75ee950494b8f89ca6898a28e2c41f5
- MD5 9a4d2ac1a8dde21ccea827f1ec96766d
- SHA1 83435c3c03df66ed9dee380854a1c551c5ad9e9c
- SHA512 efa0f3982219a902e1e35d29b7b3bcc6c31ab49f46191caee1f65d7f92b687b0acf20f94e4ccce704f6b449d8e6077f646303daf665eaa6f8ca18ad572ae1040
- TLSH T11621B75F45203813F63245B207FD7365DE6527638AF3C6B16420A0FE6782AD06505E30
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YWDNBX.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-YWDNBX.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-YWDNBX.lnk
- Size 2KB
- SHA256 9ea03cb653e82c75085572c3876f2b9359e8a0e29245993720b7c0bac0657005
- MD5 f05eb513a3bbe9011f6ae608f7f9a8dc
- SHA1 0dae6dbf3fd45153eda7b7cac3b2ef80f5d1927e
- SHA512 59970ed1b460d81c9dadca3ce284b75fbb37da775fdb5cc9c0dbb9f291ea0c889286c8b84b63cf3ec2410dd6d78fcacf7c2570d2fded0823543245c1320693f1
- TLSH T1485100907AF905E8F3BA9F72ECBE2791487BBD624D61C64D4910C50E0832B02D977B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.