User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:75c257e91f0c9dd89612b18be77dad03127212067a6607aff7c030be096b3e3b
General
- Target 75c257e91f0c9dd89612b18be77dad03127212067a6607aff7c030be096b3e3b.zip
- Size 1KB
- Sample260823-g3j4hstdpc
- SHA256 16ac9f9823a83b514112a6650d2a13875bffd402053185dc2e3698498043e11f
- MD5 927381dbc658977ce45be489016bbdb7
- SHA1 e960c214c367dd1333ca4aa3a4bb81de531f4910
- SHA512 4faa44f1f6959ad68b9470fd6fbc78fe02cf338958c97433971804032c069f4330478f2e4f3a2ec215297218ea1844278f2a49ec2838c5dbafa31d0f72c7c983
- TLSH T12021A7314FB56402EE4B19B1215692A4A6C7A1804606345716ADE5B1F7F65CA78A2C23
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5FQFK1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-5FQFK1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-5FQFK1.lnk
- Size 2KB
- SHA256 5801b528b0dad6aa0eb86705bcf5b6c2baed5bb3c841d60a1ae3603e6931ef84
- MD5 1b80ec4edf92d14d05a62c30ee2da3de
- SHA1 6a51548457269cae91e602ea397589be5f39cae4
- SHA512 d1379bf29761c74b8bd00db14b999779da6152d9f5b3150aa8ec256c45fd6ada5038d00953cc6c99babd60da9b39ab7cb8b0cf931d50d3ce3f4bd56d5875ad47
- TLSH T1304122902AF900D8F2BB8E73EDFA1B9448BBB9566DA0D59C0D40C24D0832B06D577B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.