User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:143e8b1f4256dfc80f2d32e3ab7a6240cfa3181ab61522cfd917e0cf59524a45
General
- Target 143e8b1f4256dfc80f2d32e3ab7a6240cfa3181ab61522cfd917e0cf59524a45.zip
- Size 1KB
- Sample260827-nby7patdpb
- SHA256 ff5e4f868e5d163ae6c78d24386d0db6afe80adc605c4795fa3f28c01fa868c8
- MD5 328506737fde1a37763e8f76c0c1f750
- SHA1 70c5b013d67e66b1a3068fb933cd005379e51a54
- SHA512 149519d30bdc77fe3386e9a9935bc15b213a9658aa6b3ae6f52947fe1dbc5d287b17db5056eca5f543e5c7bbb71fd1417d2215d600a96b3a833351d9d66ccf0f
- TLSH T19B11B96401CE7E3ADF558935125A7811353466E651C79BAA227C786006A2EDDD6CB230
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4JDQYA.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-4JDQYA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-4JDQYA.lnk
- Size 2KB
- SHA256 33455ebe7c4c180a3b21675cf6559a94a75d2df728c77f509d96b497c8da5286
- MD5 14335930d497fece38aab38643ae1122
- SHA1 8e58e5e77c1f5ccc3c2b7fe510e406c6d8cb3652
- SHA512 014f0eb45b1af9449c3d6a89194fd213ffef1b7eca3483eaf474ddcda928a71893bc4f2b8d707a1e289cd3fedb246df43d6800b8c1b6a8322701f9b3ae48d4c1
- TLSH T197413A403AE905E8F2FAAF72EDFE6791597BF9626D61C94C0800C24C5822B04E577B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.