User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:1e5d6ca60e7710916917ad1965fbc7d2c5f8397ede5289ca129a722d68ddab9b
General
- Target 1e5d6ca60e7710916917ad1965fbc7d2c5f8397ede5289ca129a722d68ddab9b.zip
- Size 808B
- Sample260828-3gpyjaed54
- SHA256 4c3f6fadd9831746104c6f5586610f5d6dd31c744a17640ff48671948364918a
- MD5 49a1e0fee30fc54ce90421c2f8a93080
- SHA1 a591855fa0e6c2032ea46fad9dfbd52c0dbe4c5f
- SHA512 5cebb518330995f08b9395fae4a6fc8e2601aa1b347fd13bc86f477c71f636b33766f699a30ae1a0fcaaa30841a05d687e6b58a6b5b41c163ad1381f32adccc3
- TLSH T17A018104736A4B1FE28BCB3A800504F238DF925359140C9C4C7CAD224830ACA8ACBEB0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GW2QFC.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-GW2QFC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-GW2QFC.lnk
- Size 1KB
- SHA256 b4c98d3002eb2e541b36d7020bc4873b5bf1d7e53ff7ae39cb85c697e048669a
- MD5 52a98400d344c3b8ee1ef4642a29b2a4
- SHA1 e0875e3e23d62092f930e3f87283459d850434b8
- SHA512 4f243bae6edc676c76f843555d91b5b9c4255fe838fcd8a4a761ed2c2f8a082343446afb16a1c5e219a2ab39725a688e897853ae6f3f787acb61c182c547721c
- TLSH T1543147103EFD0A68F3F39F7684BB671089BBB9968D20CA1D0140864C1472A05E6BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.