General
- Target DOC-D1ZKP3.lnk
- Size 1KB
- Sample260803-12zmcscn91
- SHA256 507ee8f923a73b7b5976e1376b2fb7d54843db5a45836a6fb2f36c63aab52f70
- MD5 50fca86b08db6524a661a00830d04143
- SHA1 963b7bb69de9dbc7910e169ddf18dfbb47bc305b
- SHA512 af5e74595bc0a04d6b8efedc565470c3f7661fc004d7676cd3460cab4592784dc26741e3d16979929375fdc978ed1162b1f1b58c515c0df12182cca15109d37a
- TLSH T1CB319C003EFD0528F3F79F7284FB572089BBB9558D11C61E0151460D1032A01E17AF77
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D1ZKP3.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-D1ZKP3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-D1ZKP3.lnk
- Size 1KB
- SHA256 507ee8f923a73b7b5976e1376b2fb7d54843db5a45836a6fb2f36c63aab52f70
- MD5 50fca86b08db6524a661a00830d04143
- SHA1 963b7bb69de9dbc7910e169ddf18dfbb47bc305b
- SHA512 af5e74595bc0a04d6b8efedc565470c3f7661fc004d7676cd3460cab4592784dc26741e3d16979929375fdc978ed1162b1f1b58c515c0df12182cca15109d37a
- TLSH T1CB319C003EFD0528F3F79F7284FB572089BBB9558D11C61E0151460D1032A01E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.