User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:51c928ee5364d7ef4d5dbd79ab4c667c18a40b6ddda4a509a4fd063bd6ce7d10
General
- Target 51c928ee5364d7ef4d5dbd79ab4c667c18a40b6ddda4a509a4fd063bd6ce7d10.zip
- Size 1KB
- Sample260823-elj13sxvbv
- SHA256 041195358b1d29a7525b2786a814e01e0064af65ab239de0fc2761e375deccc4
- MD5 a3c33a1ddd211e7ca597a0fa13973307
- SHA1 a15fe5e170f6f8455c272dbbcb090c6662f13763
- SHA512 c9bbff1e7b92ddb4bf70793ef8f14d2a1917145aa46e72f5e669447b76a16a39dc7465dfbbc88b8300a98abc5cf19958a575e092759adec51ebc9f63c9412f22
- TLSH T15521B6307EEDA92AE507543C5F8AF980E455F1E210562E82CCE027CCE6323430ACFA08
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-77WDNT.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-77WDNT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-77WDNT.lnk
- Size 2KB
- SHA256 69b1cf505695da668f15e7dded6b52ce2795302d83695713b47fe519bbcdd278
- MD5 18eff651a4139557e4a9fd0f7cf1d200
- SHA1 929d9b1f20ec80fcaccf6612bedd4a5a4438f91e
- SHA512 936562b8ea17327e21a13b6b3060a29d0c61172f4bc4446aafe6f057b68b097c1c2f38479e9240b3d03597734958fff8ad083fb140ba0a8cb6fc7a9c64d305f9
- TLSH T17E4145406AF811A4F3BB8E76D8BE6B50897BBC564E61D65E0940C10E0432B05E9B7B6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.