User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:17de9b57be3392693f5623606dd91d20ed5bee519607248b887f751c302ab2bd
General
- Target 17de9b57be3392693f5623606dd91d20ed5bee519607248b887f751c302ab2bd.zip
- Size 801B
- Sample260901-2e2nwacj6v
- SHA256 f659ac3607cde1baeac0177d4ba577e2ee232bd435fba971bcf4a13e8ccdce9d
- MD5 9fb892936e0f62427333ad7cd3ebad90
- SHA1 11f910fa82f877c117a9eb79625abcc20900c4ae
- SHA512 9b4ca03fa7280ae9d8e450749a5de74a8e1f6d2d73ac5193172a4c7efc0bb1222e39313820fbc22fa0865a712961f1b8f676063a6205237d2d50cddfaf73b2a1
- TLSH T1A201253061682C40E9E6597FAF0B8EED5FB157814A0092A455431F655423FF256EBB70
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7583D4.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
DOC-7583D4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-7583D4.lnk
- Size 1KB
- SHA256 e8effb26c913176397481f8596071ccceff886022cab291766b3c7a3f9fa15dd
- MD5 30f586e9e2221203bf048e23bf8d5c5f
- SHA1 36c6fa50d98b428f3637b7b418cf484763ee87c0
- SHA512 c2a623cd0293d03ea1cea3444ee41f15ba237901900c970229a8869517d0b8db4ff1c6cee7e1717dedfb33af88843a7d82bbe89062fbe86c6db804fb9597eb1c
- TLSH T14A3124103EF90668F3B79F7784BB571489BB78568E20C62D4151854D1032A12E67AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.