User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:5e98ffc40fc7368dbb7d94ec344d20cb3651061f229d70dee0fc8d73fc80ef3e
General
- Target 5e98ffc40fc7368dbb7d94ec344d20cb3651061f229d70dee0fc8d73fc80ef3e.zip
- Size 1KB
- Sample260828-rl11taywdv
- SHA256 01c04b1bcd9d73e7845dcdcf2616977fc33c12f52b081e5acd3549cad22f9720
- MD5 97281b5d67ad4b567a0ce76c8b3e49c9
- SHA1 8277c928c8259bf663069fe7d1c7d4564bc7dc29
- SHA512 45bc3e8f2fd4404ba8a122e52f523d47e038c81c4b92ac0d901c36810442830c8ad7e795b19409d2d1e2551b06a753bebc2defa30bd1e489421def027e2304f1
- TLSH T1D4118977E5C46D48F10366B244921D968584A3D65F099007041F4713B18BDD159E97BD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KQ2U6W.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-KQ2U6W.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-KQ2U6W.lnk
- Size 2KB
- SHA256 1cb6e3f4740e249965572faf5bb3dcabe602733910c260c76ef572331beb0e3b
- MD5 e791b53e9784f169fa80166395aa4ffc
- SHA1 2937395c93fad2d08e4b8fa4c91dc212e01a560c
- SHA512 a5be1fe8080a804cb23d4c0da5daba5b6aa08faa5a86defc9b367da059200f635d5d260f172be183cc38898cbd6b688660a0fa927d65ce111159aaccde4b23fb
- TLSH T1174103403AED45D9F3BF8E36D8FB6762887BB9529E60C55D0990C24C1822F01E972B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.