User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7d405e7c7cf55e1a5d0a15e0554d99ba1b41829cca5f82ac1a1cf9625665edb7
General
- Target 7d405e7c7cf55e1a5d0a15e0554d99ba1b41829cca5f82ac1a1cf9625665edb7.zip
- Size 1KB
- Sample260827-152k5a1dpf
- SHA256 e060c95903b74c266bf33255f1b80b2fa288446cb92686c965b7108fbd9a3c07
- MD5 a34ecd3f7dce1c4867bb6bdbbc52d427
- SHA1 04329f0ce8085e196a74ab5f619dff75bcc531b1
- SHA512 62cf82f48ad4b5f7115846bdd9d22b47dff208765a923e77b8ed39356ebcd634ccef456db25905f959d708bfe7290c728f30dc20320b32085bd3ca449f411248
- TLSH T19B11B6A101934D74F332917C49A349626CD51D305E71C19F481CF3E0EF33AA2A929BA0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-60QE2N.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-60QE2N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-60QE2N.lnk
- Size 2KB
- SHA256 2006df85b664b7e26dcbdb84eae5dadb143a4fe1c807cd598a607ecdd4ab8c67
- MD5 7f508ffbce722f21d353e2b2ba81defb
- SHA1 8733247ec162002723fd939f1c91ad5c98a76162
- SHA512 cb708cd18489dff9f5034efa59443fafa54dc69d23a03c1344b54f0975a88031f48e5251e771fd097083163626cec214c84b270294c572861c3d2444d87dba41
- TLSH T1D2414B906AE904E5F2FB5E72DDFE2781857BBC62AD60D95E0C40820C0832701D67BB6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.