User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:3053ba3d482cbad2154216b225d91058394762aa653914c63967dbe18bb7cfd1
General
- Target 3053ba3d482cbad2154216b225d91058394762aa653914c63967dbe18bb7cfd1.zip
- Size 810B
- Sample260823-efppdaxtf1
- SHA256 ab291b0323c96774464b0c0a7fd4ec34fa409e5a138ece2067f6923020eaefd2
- MD5 3b62b47daf698d5c628191411e887484
- SHA1 db94eb55684f6e0923139fd753ce709cb4c8eb61
- SHA512 d75985a1cd11904142c04d84ae0910d3a7c3afd2d51b7009a8569e2724848b1efa24a36d8a04f552576a10f6d30b15c9431c1ae3ff8eb47d4ddeb3d5c3822226
- TLSH T14A01759E43040BA3E1AA6C39D6D424C147716AE9D01C420D8C35459F7912F342F97EDA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JQ0CTS.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-JQ0CTS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-JQ0CTS.lnk
- Size 1KB
- SHA256 dea59c4dbb6b37a1a5fcaf22c99f30b2e4dd4d4630b9750fa01396ee6e0db057
- MD5 5eac4d349b440a3f2edb9238902a4d9b
- SHA1 a91766f8156a969bd1786c6729dc52c553843aa6
- SHA512 88a26defb69fb3e58763b51f40d9f1b1721aa643c5e6253bc658315bef1848938ba492f641e49d88413b0a4e29ae78212a44af90d8c0b88da8ff2c50c6da447c
- TLSH T1133197503EFC0A24F3B7AF7284BB6B1099BFB9568E11CA1D0140860C1032A01EA7AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.