User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:29cd77d067caba945029ad3786533c20150a6c9093ad9d98fea5138cc21659be
General
- Target 29cd77d067caba945029ad3786533c20150a6c9093ad9d98fea5138cc21659be.zip
- Size 1KB
- Sample260828-ppmaqaxwes
- SHA256 afceefba881edf58c4a4bf5d646332b81843e60f6286d6e43f4b1b7221ec2c12
- MD5 b85793a23d3f068f9e051457bd14a0ea
- SHA1 ee4ba70029f981888b15dbdc246967df4a320d86
- SHA512 f28795d1d637574a8f38dfe643a45543e35a5ec26a47d0fca6a4b59a7cb36908738bf885a7af4ea5ddcdbc1187478696902b0d4fd14ce75c15292fa3046051d0
- TLSH T18521A356ABE785AFE22188F047D52290B2321AF604FE1116E6F4848006FDC8E0ACDC9C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L4HHCQ.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-L4HHCQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-L4HHCQ.lnk
- Size 2KB
- SHA256 dec77b9d806d14b044dfce1027afd82aa095158e9bc7ffe27a1b64dbfebf67e2
- MD5 fc1437c76d288a608cfda301b32a1665
- SHA1 88ae16e0879690cfbe56b8da6210de1ec692bce5
- SHA512 16bf4df9868e4e43b190e62eeb1bccd35e26283223b3aaab9c6fe24ca0aabbab6191d1223cd709c07436764a1926edf172295e7b6b1b3dfe489adf5458c12e78
- TLSH T12B4103902AEE05D8F2FB9F36EDFE6790997BB8525C61C98D0944820D1432B01D8B7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.