General
- Target Password txt lnk2.lnk
- Size 1KB
- Sample220901-m5p1faefh3
- SHA256 57959c2be2ac6349aa37edb73cd8a88fe8d3e69678cac4b38fac401bd3141fdf
- MD5 4cadefa553cf8775c2d879c7c0c44b98
- SHA1 3c3ab091ff27be626e5bde52fffc21128cf2f2ae
- SHA512 66b530afd6a5edaa0fcb00cca4ebb5817e7abc210dfc601fbc29f95ca83b1dbb8b3e77e16c8ff0281b3a704b5af27fe5c7f6d391fe13fe0248723d516e951a4f
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Password txt lnk2.lnk
Resource
win7-20220812-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Password txt lnk2.lnk
Resource
win10v2004-20220812-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://doc.documentshare.info/iagodK3zBQqUKXJDg/wjJkRpsx7Q4+/VKnDzfXYTQWo=
Targets
-
- Target Password txt lnk2.lnk
- Size 1KB
- SHA256 57959c2be2ac6349aa37edb73cd8a88fe8d3e69678cac4b38fac401bd3141fdf
- MD5 4cadefa553cf8775c2d879c7c0c44b98
- SHA1 3c3ab091ff27be626e5bde52fffc21128cf2f2ae
- SHA512 66b530afd6a5edaa0fcb00cca4ebb5817e7abc210dfc601fbc29f95ca83b1dbb8b3e77e16c8ff0281b3a704b5af27fe5c7f6d391fe13fe0248723d516e951a4f
- MD5 SHA1 SHA512
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.