User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:7a6829e32c6d3ec6bc9020396c393631fa39ab20627f8ed2224e8f01fe12a2b8
General
- Target 7a6829e32c6d3ec6bc9020396c393631fa39ab20627f8ed2224e8f01fe12a2b8.zip
- Size 1KB
- Sample260827-b5bbhawyd1
- SHA256 d9baf17443d8711161a95b6e578b6523be2f03c2b819d82ddbddd506a15f2560
- MD5 5a662ab799c5c072169899946f95a703
- SHA1 0d17d6c1f5c246283755eb80b97b12a8372e3642
- SHA512 4bf5602641edb9f9bfa661044ad75857f01c9359536c524bf3bfc09f9c2525b746dcf1a757fc465b18c2cada868fa8047b032272386cae7c34348d6dbb50f4e2
- TLSH T135216728D7DFC905E05AE0B6D284DA18BAA8C6D59644EA0F80594FF32D30C75774226B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Q92PRF.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-Q92PRF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-Q92PRF.lnk
- Size 2KB
- SHA256 68198e7439054025bde548509e4b5460fb33c1f3eaea593aa9d93f7d08bb40c2
- MD5 6dfbed622736571efad0f928449bac77
- SHA1 bab763d92dbb17217bba164ca0c1c0f20e7e03a4
- SHA512 bd2452205cbdec044143ee2853c2ab966a734a3e18521da112a4bc65dec2d12ecbed7caf016381127434035afcfb3f5cfc25ebc4ed74c5f2e2999f34002b9468
- TLSH T19C4133806DEA0598F2FB4E76D8BE2B444DBBFC625D24C25C1951810E0823F01ED76F23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.