User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:79ac8710abc8c29b8129b37db28974a510c84aeef9fc10cfc04a08083c7ca32d
General
- Target 79ac8710abc8c29b8129b37db28974a510c84aeef9fc10cfc04a08083c7ca32d.zip
- Size 805B
- Sample260831-st8ajaxwev
- SHA256 290192b601e7aa76fb764cea01139aadbe4b670859f7ea9f6145daff51bc763f
- MD5 24e55fca5c4cf00b23ad93c77f33a440
- SHA1 5543f8d14ddd34538d5b62cf89dd2a9ed8385fb2
- SHA512 cc97d2bcfc907f32d111f003861aa2c974d018f1fb1f36b558f52463c646b878c33a8dea98908dfdee528f19b745af2c3c86559b395371229136b501a58f14fe
- TLSH T12E017537CE0C263CC50322F21A26E3885D1B2D32D7AF9099914D1D132F8E9E84ECB02C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LUICJM.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-LUICJM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-LUICJM.lnk
- Size 1KB
- SHA256 48e7fec68ed636d73690c34e20b3aa28874bc5ef6950c4637cb7177491be7592
- MD5 6dea72b47fc424e688558838b30e0b14
- SHA1 11ae6749e3ab7223e7a990e84b3021bb8c5cb8c9
- SHA512 559d2b5d90cd36ff7d762910a0f222bc1899d982a64fdbd93628a494d931970a8bece214b04309ff3cc5a2c02828fec3d0fe71375d032d48d03a41cbcd7c7d0d
- TLSH T1543124502EFD0A24F3F39F7684BB5B1089BBB9AA8D20CA1D4141864C1432A01E67AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.