User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:ec0bbb64bf290e1581e823aaaf9ad9ed6fabf2862b5ec56d2f0195599e426b21
General
- Target ec0bbb64bf290e1581e823aaaf9ad9ed6fabf2862b5ec56d2f0195599e426b21.zip
- Size 1KB
- Sample260831-p2cl2sam9y
- SHA256 976c461ad3abbfbbf4a6dfafa939d5eb0d6728be13b44d2b2c937218f5b20c61
- MD5 969e00a5e2871769895303b0181ec8a5
- SHA1 629f62fc3a4b1505c047ff0bfad88afcb85ba3f2
- SHA512 31e0f02c693292442f1fe043cc4f088f850fe8716cb9c83c82d3992122c43953e72275394f3af25bd9444dd1b5ff64eb07f012c65fd2351a66e928a33f8f0809
- TLSH T1BA21D3B189295A00E0C2837C2FB9D6248728606AC09280BB56FACAC044AE8D7C41FF74
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-57XYAK.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-57XYAK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-57XYAK.lnk
- Size 2KB
- SHA256 af08e7adf7db368675ef4bd3c5a1fe6a32e6fdeb700a050fe0bb4224c138dd0c
- MD5 9e42ba1569f91cb0253f374edfe79ed0
- SHA1 c72255bd8d521a6050e9af3072150e2dc3966e1d
- SHA512 1016c7730295bb1288f7e7bf28bcf4d1cdebd08a7d1f6c0ac9cd054d6cc76b4d43c23e67b0ef7293b55a5c6c9fb61f84123ca5d1c569102509d69720752fd5e4
- TLSH T11A5155A02AEE41D8F2BF9E76D9BE3752487BB9229D20D6DC0544C10E1823B41D972F22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.