User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:4e39bb376d94564ea88e059f101abf776505f74916cb5bf6624736bcd21128fc
General
- Target 4e39bb376d94564ea88e059f101abf776505f74916cb5bf6624736bcd21128fc.zip
- Size 806B
- Sample260831-qpxbcssglg
- SHA256 96d34fb743433c70116229516d5242a7153d114d5455fca2914e3cf9ac2cbf50
- MD5 19b06b4454650ddc874a8c9c487de5ab
- SHA1 2e4e0da7619b79a67658bd98b135a33d4b52fa61
- SHA512 0afd1297bd99c067874422db37d103fa7125475b0a144353fbf3b6d785c88705fa1cded6d6f4072f9dd20184f14e65b99524ca4d3e647f4042390882c40b3bf1
- TLSH T12F012596812CAF43C6D674F21B1236284D48F37DDC160449A825DD86C86FD57BF63262
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5G8AML.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-5G8AML.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-5G8AML.lnk
- Size 1KB
- SHA256 b7a00c218f062999e539b5a61184055b6e56f2e9080d626323139d65084eff77
- MD5 582fc091167285fe3759049f52fc1482
- SHA1 0aa453f05c53149ad169e5f375c1d974266e5633
- SHA512 bbe171c319632b81d60d40a950a256a5789eade85aee0e81a841ad6ccff1ec5fb5824c3ffa50bd800d1cd5c10ce86ae2635f7fd5d980feaaa7e6b3ba8614aa22
- TLSH T1E03197103EFC0A68F3B38F7284BB5B1089BFB8468D10C62D0140860C5032A01E6BBFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.