User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:be02be0b51607ab768cbec1ad16db1d7fd5d7e82a42f86b26a457593f296197f
General
- Target be02be0b51607ab768cbec1ad16db1d7fd5d7e82a42f86b26a457593f296197f.zip
- Size 1KB
- Sample260827-b588jawyev
- SHA256 47b69a19c91c3f9d77dd07974d67f02de73352d5b4e26053b90d8cf92af1021c
- MD5 8d9f1ff5ca712133609ffddebba235ad
- SHA1 d237c53f89a1a216469f8c86d1ef240cf7311d95
- SHA512 1d783522c3e54e26bbfaaf88319cef76383492cf5ef8b20135f1c1527a5a043231552fcae5cf73704a080e2750081ffa57c6a61879e87fb77b8d61c58e327c2d
- TLSH T1B021961C65F9DD81CDBCE5BE1062C6EF1EAF33C57F04D2836A398680170A4E50B45153
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-27SULK.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-27SULK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-27SULK.lnk
- Size 2KB
- SHA256 2e4a7782e7a91d7902d74b0eca013167908a11620131b2f2bd2e04112ac32f15
- MD5 bc851f72c41d38d68b1add6e6d67bfd3
- SHA1 efc685e900f889a08eb0fa1c207f183595f0797f
- SHA512 c117b3745035dcaadda68126e34c5f0aef78028a46fddcc130a0d29a01b4419e6b4ddcaabfb733a82daafd04714267f45cd75ab691578b72fd85b99b8c083f2e
- TLSH T1864179403AEA01E5F2BB9FB6ECBA7780497BBD915D60CA9D0900810E1436F41D9B7B37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.