General
- Target DOC-H69T3I.lnk
- Size 2KB
- Sample260803-15agmscp4w
- SHA256 86fe87b6355c43de304abf70670b8272d5ed8c1189fd83bd3d02f4ba36cceea6
- MD5 6f951cf61d87402429e3aca34f02120f
- SHA1 e9283cc2ebbc98e5f98feb705445e1fa1a98ffc6
- SHA512 bf3ab2e720958b29d6c06ca30e63d3f6f289bcd8bc1388663bfbfaeafebf4eb0f1293f75612b9d00fbce64a117da2cfc60ab3fcdcda4c0518122508c90b39033
- TLSH T17B5157903EEE11D4F2BF5E72DEFA2B91887BB9562D60D98C0840C14D0822B40D576F63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H69T3I.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-H69T3I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-H69T3I.lnk
- Size 2KB
- SHA256 86fe87b6355c43de304abf70670b8272d5ed8c1189fd83bd3d02f4ba36cceea6
- MD5 6f951cf61d87402429e3aca34f02120f
- SHA1 e9283cc2ebbc98e5f98feb705445e1fa1a98ffc6
- SHA512 bf3ab2e720958b29d6c06ca30e63d3f6f289bcd8bc1388663bfbfaeafebf4eb0f1293f75612b9d00fbce64a117da2cfc60ab3fcdcda4c0518122508c90b39033
- TLSH T17B5157903EEE11D4F2BF5E72DEFA2B91887BB9562D60D98C0840C14D0822B40D576F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.