User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:cdd2f230776a4ec632ef11e87ab8d7f259269ed98585409d1c83efd0de48d17b
General
- Target cdd2f230776a4ec632ef11e87ab8d7f259269ed98585409d1c83efd0de48d17b.zip
- Size 1KB
- Sample260827-2c2wvsz1cv
- SHA256 4a7d5a1746918161f39c1bdeee61eae325cb5bde2533ba39fe42f12182651aa6
- MD5 28956870205bc4a9e0d36c229cddbdc1
- SHA1 153e7aa25391dcc402b5b1bcfd6a65d3ac23c305
- SHA512 69be920b996d72f6e63c110da15a1d9f5104af5da0498c7dcd52a090355726cd63e84ab2bfc313040f8b552ddb424e937990da776f1db9e76595a36f5331e23c
- TLSH T1BC117296E3FC1900CA4726335CC48F2411ABBCAD961290121A9CF5C80FAA1CC9F93E8D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UJXO95.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-UJXO95.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-UJXO95.lnk
- Size 2KB
- SHA256 ccfc5c310c63fdb8a60a68933dee056486fdee9be7aecdd4870cb050529dd27a
- MD5 85f041b5bd57f77c4e5023d7669d9677
- SHA1 ce1b636dcfc40defeca990e77bf1d5db1c785fb2
- SHA512 5abe006f1804739d9a9e2c6c3e497be4e311317747bf72fe720ca6f3ebdfaf2bb7d401ebf18eee0f549a983eaf5935c82f9ae6a7a8fcace34bd0d42734760d31
- TLSH T16D4135903AF901E8F2BB9E76C9BE575589BBB8065C30C64D0900C24D1432B02EA77B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.