User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:a3646ccd88b558be13b6f2b9f63968da01761817342d808cb124746afdec84e7
General
- Target a3646ccd88b558be13b6f2b9f63968da01761817342d808cb124746afdec84e7.zip
- Size 1KB
- Sample260831-sb4vdsxsa1
- SHA256 10599746a3fc90cc715abb47d7eb44540168ac57353cba610a7ae4f115390109
- MD5 d26991fc06ac6140f1586892a7143286
- SHA1 a520ddfbe927c14775aba89bc70ffad861b71b1f
- SHA512 45b9e4b4a7329d56cacef9758b7ec095a1ecf7391b25846f6b55027b51cc579a9c6a490fe0994affff975139979a0c2a6396f8437913aa3e43cddfa2eb117bd1
- TLSH T12F21B90277B98700E5EF4075E4A23527DFB439610813B4AF08FD7D8554A04C15A978F7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AXPNKF.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-AXPNKF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-AXPNKF.lnk
- Size 2KB
- SHA256 7112ad539baa55bf4d080ffca3ae7d01194c07c6d3f068907d95b371bdead708
- MD5 fe9cc9340e3325547e37bee6a92c168e
- SHA1 b934b41740d09cbacb0b7c272cce8a5318ed465c
- SHA512 637a45e2256ab8f63c2c9694cb406b362d3ca13ff8b109aea674fbbccf537a5d3858b391292508303e9970458e73c9a48a9113fca359c36163b205f310f11065
- TLSH T149416B903EFD0198F2BB4F72EEFE5B10497BB9522D60C55D4441814D1822F11D977B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.