User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:81c57e34a19ef3ef6cd3c621a7ea1a7da1ecf2b5a8584f16247a8909df150a16
General
- Target 81c57e34a19ef3ef6cd3c621a7ea1a7da1ecf2b5a8584f16247a8909df150a16.zip
- Size 1KB
- Sample260828-d51bqsswft
- SHA256 1d490cf9f2d04e5ac50171763861a2d193329a9bb47c1b021f5311422d6c04c5
- MD5 d0397c6ca9c150b9090e5aa15cef9ce7
- SHA1 faa9546a4102ffa5598d3e80002a45325d1afb6e
- SHA512 195f46c8dcd09bffa40459c7951f437f3a868804966cb073e8478b8fd3f6369ec1199cd34c27cee66eac45f6440494f127e8dbb841230e66d0c888b94545e975
- TLSH T15A21740A83FB8CE9D1027D34F02645F6D62EC251AF2587367C9F4484684DBDCAF2A810
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G5O65F.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-G5O65F.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-G5O65F.lnk
- Size 2KB
- SHA256 c22397bed56df8bff2816625bf55ec771c58382f7605d90eab11f10989373ace
- MD5 98986ffa4ba6b5ce584595dee2ee28cb
- SHA1 a9dd48c4c7e4a78c5db9d1fa51054fb0a5a469d3
- SHA512 6ac2c59f37c01b7d587504f22e81bbc95561ce7dd3073398280ec30e423783bfb7ce7c6ef6d67f80309f05393983f9fd65a0f366ab4b9d29bba49c82ff1cc205
- TLSH T19F5126902AFE4194F2BB9F72EDFE6B10897BBC916DA0C68D0D50810D0432B01D977776
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.