User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:983c05d04e578cb4c2c3f17f0e21bba37315b5f26a0044194c0a55ca91fbb996
General
- Target 983c05d04e578cb4c2c3f17f0e21bba37315b5f26a0044194c0a55ca91fbb996.zip
- Size 807B
- Sample260827-vfc9caycpd
- SHA256 670b4cf1ce3260bac19b8845e4f308379ea8743f9eb57fe392bbd40e4c1cba96
- MD5 6a864058ff46779dd4788336480dd951
- SHA1 b6ebf44b347e607ea0d118454460903e05f18c6e
- SHA512 ecabb50c1a50c7896b9887e7e8f509a0dcde7d8d7778d867723b2e01a6d4335d499b6cb07249e04e6d9900458ae27f415ba31a237ebe3dd3621ccd96c1bb7947
- TLSH T1BE0170A04FF0E53ACC406CFAA0A36060519FA342EC643F7A9426A8B13CC17A23CC1E06
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WB87GN.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-WB87GN.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-WB87GN.lnk
- Size 1KB
- SHA256 274321ea468fff33666fd63a87f8e58d7ba7fe6b02cf07677b21fa0e27f90199
- MD5 66683ff8e8010ca0d56146192a46fec7
- SHA1 ffecfcc3716f361c6f0cbda6dc64ecf5d9c32445
- SHA512 c195dafc50a2eea5ad44dc94f02c32c881387db442e431a063ff902c02fe64cae3202cd451ff190391cc2e58eb65c1d4cee0b9626842c8ae0e263530b06f118c
- TLSH T1683147103EFD0A24F3F39F7684BB572089BBB9568D14CA1E4151864D1432A05E67BF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.