General
- Target DOC-NWG4TU.lnk
- Size 2KB
- Sample260803-132hcagf57
- SHA256 65c700039ac8124f2ddc9e933a2281c7089af102d2af044f16724e012ff5dec0
- MD5 b002d963cc3ac8c48a737dad2b10dba5
- SHA1 7662d40249d648bbd4d6249bc8e4fbe01a240710
- SHA512 a67dc6808cf804f8cc8ffd1861419801f04c5e6e37d201eff6adb51f1169e4ad5e2120ec11d10018a2235d646f82b4f4fc378972c235cc8d56472c1194dfdb7a
- TLSH T16A5149903AFA40D8F2FB9F32FCBE679148BBB9A15D20C59D0541814D1922B41D5B7B37
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NWG4TU.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-NWG4TU.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-NWG4TU.lnk
- Size 2KB
- SHA256 65c700039ac8124f2ddc9e933a2281c7089af102d2af044f16724e012ff5dec0
- MD5 b002d963cc3ac8c48a737dad2b10dba5
- SHA1 7662d40249d648bbd4d6249bc8e4fbe01a240710
- SHA512 a67dc6808cf804f8cc8ffd1861419801f04c5e6e37d201eff6adb51f1169e4ad5e2120ec11d10018a2235d646f82b4f4fc378972c235cc8d56472c1194dfdb7a
- TLSH T16A5149903AFA40D8F2FB9F32FCBE679148BBB9A15D20C59D0541814D1922B41D5B7B37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.