User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:908074060439e5a7bb2a13266937356761eae90a318e830ae62e087179734c46
General
- Target 908074060439e5a7bb2a13266937356761eae90a318e830ae62e087179734c46.zip
- Size 1KB
- Sample260828-e78lkabg73
- SHA256 cd11161cc9adb95896c07c3ffcf8c17ccc533b53fa013961dbfc7cd567871904
- MD5 9c458f54b7ab37d11ace6ba09ceb52c1
- SHA1 ee6a08727740f7f12a145db74254c806ba521e26
- SHA512 bef95307b55da7af2be50104466b4c979d0550b6ada412a4c1c296ea1da2d38632a92d9672fcef21c4313be3084bdb789a931d60834f5f466903bbfac44c6bdb
- TLSH T1A221AA8605B459A4C88FD8BC41AFA608638165A98780C9FAE1D492C43CE25E19D83A7D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CLUHVU.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-CLUHVU.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-CLUHVU.lnk
- Size 2KB
- SHA256 37d8ada100e523267dd40db4e8bbbc0e3561923e890995eb1f681bd6cb5b0e4f
- MD5 66bed76c09950007b177289c9ea4ca3f
- SHA1 58b25f0e06a1e6c0e7a29432e9f158de642bb3b7
- SHA512 4be33de4e2a3d687092d31524d8dc8aecc979df56b42f1997caa77d1dcef277b154de1ffe12fef35ffe8148ea19b68ee3500844632f22a9e2c8e0c14b2b5a2f9
- TLSH T1495144507EED41A8F3BF5E36DDBE6311487BB8526D20D18E0950C14D4932B40D9B3B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.