User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:0e495810eb10dd40e2da20414882945f912e5b425d8e8f7ba021bc26c32f4e65
General
- Target 0e495810eb10dd40e2da20414882945f912e5b425d8e8f7ba021bc26c32f4e65.zip
- Size 1KB
- Sample260826-tpjl2ssbrf
- SHA256 64e435b32be813d3df4755899a7e5706fab15771cfebbc9410fe7b3cacbfb16d
- MD5 3dad518c61997749e8e217dec710f235
- SHA1 fcfe6d427fb95b6f4ced69c01964efe552f2ab07
- SHA512 9556c12f975d77363ec0a2262432b1470b138b8cf70d95c53b0aa01f0f05798611cc8b6da54d5c90b7ab06edb99a4cdcc01ba33474251a9d595b8be07f5ba029
- TLSH T1F621965EBF2E9D4FDE0FA8769B8059D950C522D0C91AD5991D1A13C1E83ACC21FA1B03
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7JVS2M.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-7JVS2M.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-7JVS2M.lnk
- Size 2KB
- SHA256 2fff0b335e02c2a0759c37d05dadaf87b0d4c47feb60a1b5165f16716bdc399b
- MD5 6bca4220cfd1d41e5cf803398977fa4b
- SHA1 480ac9456d775b2eb327471d994430234231a94d
- SHA512 cb7826a843c29b277562fad395fe80554a4195d0e224b1ccf0acb9f6d527c077bc6a5883f5133a231cae72750eb3ec03cd04b53e934172971dfa273cf1615333
- TLSH T1FC41269436F904E8F2BA8E72ECFE2750497BBD615DA0C28D0951C60C1422B01E573B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.