User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:84b682d4eeb062ac2cedee10b753464de669b4dd6d898758fd000bd788139443
General
- Target 84b682d4eeb062ac2cedee10b753464de669b4dd6d898758fd000bd788139443.zip
- Size 1KB
- Sample260827-bf2gdsyclh
- SHA256 8396ea617300e546ba219a55f8b7b1e25ec32aef3a119f3730250e96503fe3df
- MD5 9f1330b1a3a82de75d9906dcbb36df97
- SHA1 bedef25fbd6b1a81051e2a14aeef62bece9b5f40
- SHA512 094a7c430f5e679a53dbd5b4964df9356faf9f1f0f9bf7b67eb779b95c45005b4f9d065a0773ee72b88b3dd9876a84840d0a2ecf4708696d8fcce753aef4441d
- TLSH T151116642B3714E35DD10D87DB95C1332DB5407B57A1393851C1056813E729E223453E6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TL6YXL.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-TL6YXL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-TL6YXL.lnk
- Size 2KB
- SHA256 b2db3613fd1be84c6a0a31c71938bf7da429c739a303ddc9df967a1548399e07
- MD5 095f714a3a509d54f9234ffba5a0a0e0
- SHA1 344c2679987d27c2b9981b8f7e5344784bcc7940
- SHA512 27395a23c2dab5c714ee71432a7356bf3698a474512754ac64bad1dc117034f919f942b0e1741b1f83ef227dc70a5e13f0151a1fe29d42bc9d933fd4f0eb6498
- TLSH T10F4121503AEE01D8F3BB4E73CABF2B95487BF9616C75C54D1800824C1822B45EAB7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.