General
- Target DOC-IGTBI4.lnk
- Size 2KB
- Sample260803-14ae9aydnd
- SHA256 9696f2f78d7e5af935d0aac2abba5f4dad01ca3ae30144db1b5564c80df6305d
- MD5 0afeb2ff0e3e7ded842f4f52bc493695
- SHA1 391b00d89850c40d7bc939e70564d7db77305ac9
- SHA512 e393b5dd58e3bf0f554a311632c46a885bede2044d2622a386706a99f2451e3ddbe5e233bb223ffa40b77d562440cc3986ad6c941b6b3744b145f5e15b4ca174
- TLSH T17F4105803AFA51D9F3FA8EB2EDFE678149BBB9555DA0C59C4840820C1432B01D5B3F63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IGTBI4.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-IGTBI4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-IGTBI4.lnk
- Size 2KB
- SHA256 9696f2f78d7e5af935d0aac2abba5f4dad01ca3ae30144db1b5564c80df6305d
- MD5 0afeb2ff0e3e7ded842f4f52bc493695
- SHA1 391b00d89850c40d7bc939e70564d7db77305ac9
- SHA512 e393b5dd58e3bf0f554a311632c46a885bede2044d2622a386706a99f2451e3ddbe5e233bb223ffa40b77d562440cc3986ad6c941b6b3744b145f5e15b4ca174
- TLSH T17F4105803AFA51D9F3FA8EB2EDFE678149BBB9555DA0C59C4840820C1432B01D5B3F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.