User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:15210d0c4e535828c71d99f70726ad65603d8ad9e04d215f082abf7e5c578d94
General
- Target 15210d0c4e535828c71d99f70726ad65603d8ad9e04d215f082abf7e5c578d94.zip
- Size 807B
- Sample260830-2nekps1gjd
- SHA256 83b3002ac19189895177453b6794ccab238511fbb65c2e6b91ad9a06b5ed9b44
- MD5 df4929998e91208c652bfbe5b75ad5e3
- SHA1 2fe1f4955090158e6ccaa339a015c9e7a35576a0
- SHA512 77dc2fea5c0c009db34658c2d1e2081dfe35c6649ee728bf1332177780542f81f7c202ec49687f0cbcca7ef27a5d2128e816a93a48d4521630d1cb34114d8a42
- TLSH T1490146797B395D21D912857C5760DA00F34F56E5502D9A3C5294BC442D60EF33E89950
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V28YHV.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-V28YHV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-V28YHV.lnk
- Size 1KB
- SHA256 a1c23eca510acb60948e185b0a3a899bc5f2b6b7aaa1af30bd3ca4562a50223c
- MD5 1767e59c619ac12ccc2483b3cd908937
- SHA1 ae9a02386feaf18bdd383d31171103dfd53ab761
- SHA512 0f869d9d58e5ca802679fc2c50d6e930c00f83b52cf40eeb7b79ffadf1dbc069a9b5a6f8ceed9624832e9024f474a01428556ca6c8463a6f78fd8ebe795bb165
- TLSH T1B8319C003EFC0564F3B38F7684BB571089BBB8968D20C61D0140850C1032A11E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.