User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:5a1b6f1a840f29d89007e222558af17e52f07a95b74aad6271f11ea2cf109ea3
General
- Target 5a1b6f1a840f29d89007e222558af17e52f07a95b74aad6271f11ea2cf109ea3.zip
- Size 1KB
- Sample260823-epr6vssepe
- SHA256 a00388ffa381bbdcd03d71cf787bfb7b90fe5c28603926d67d855bbb6137b36a
- MD5 e7b5ddb1b29f8d35e8307d6a6f904f9a
- SHA1 e7e6f3bd9416fcb9f42b34ff6ac47baa709a7127
- SHA512 93d809bd3ea258def23f6dd6f3663ad83d5c844fffe44de063fec7ade6ffd16680ba9cf1b3ebba3ffe42ae0be38022116850bb86f5dadc312930676b5bc166db
- TLSH T1DE21C6B3BA7995D7EB8A22B79023DB87A29E85619A29F807020006872D905904B14ECE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-854P04.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-854P04.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-854P04.lnk
- Size 2KB
- SHA256 4af989354733f5bb3f6082c84aef602ab66ba0d6319622f2ab112dda0ee0f725
- MD5 1aa6543c1ddc6c64ffc0ae14a5b58ebc
- SHA1 839c39fa120fbaa539681ca3ead7910525c7b807
- SHA512 5e6739f4717ff3b7ea6a6a3812b4197aec29aa8155bb119c65933c4bfae467296e0f484f0f7061435fa6b11eef85b68f5d520434d1fff119cfd6ba48f26327a6
- TLSH T1394123903AFE55D8F2BA5FB2ACBE5B510CBFBC625D24C54E4840820C5462B41D972F77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.